vendor:
Drupal
by:
milw0rm.com
7.5
CVSS
HIGH
PHP Zend Hash Vulnerability
CWE
Product Name: Drupal
Affected Version From: <= 5.2
Affected Version To: <= 5.2
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2007
Drupal <= 5.2 PHP Zend Hash Vulnerability Exploitation Vector
This exploit targets a vulnerability in Drupal versions up to 5.2. It utilizes the PHP Zend Hash vulnerability to execute arbitrary code. By manipulating the URL parameters, an attacker can inject malicious PHP code and execute it on the target system.
Mitigation:
Upgrade to a version of Drupal higher than 5.2.
