Exploit Directory: Drupal (41)
Drupal 11.x-dev – Full Path Disclosure
High CVE-2024-45440 php Milad karimi 2025-04-19
view exploit
Drupal 10.1.2 – web-cache-poisoning-External-service-interaction
High php nu11secur1ty 2023-09-08
view exploit
Drupal avatar_uploader v7.x-1.0-beta8 – Cross Site Scripting (XSS)
Medium php Milad karimi 2022-03-30
view exploit
Drupal Module MiniorangeSAML 8.x-2.22 – Privilege escalation
High php Cristian \'void\' Giustini 2021-10-01
view exploit
Drupal < 8.5.11 / < 8.6.10 - RESTful Web Services unserialize() Remote Command Execution (Metasploit)
High Verified CVE-2019-6340 php Metasploit 2019-03-07
view exploit
Drupal < 8.6.9 - REST Module Remote Code Execution
Critical CVE-2019-6340 php leonjza 2019-02-25
view exploit
Drupal < 8.6.10 / < 8.5.11 - REST Module Remote Code Execution
Critical CVE-2019-6340 php Charles Fol 2019-02-23
view exploit
Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code (Metasploit)
High Verified CVE-2018-7602 php SixP4ck3r 2018-04-30
view exploit
Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code Execution (PoC)
Critical Verified CVE-2018-7602;SA-CORE-2018-004 php Blaklis 2018-04-25
view exploit
Drupal avatar_uploader v7.x-1.0-beta8 – Arbitrary File Disclosure
High CVE-2018-9205 php Larry W. Cashdollar 2018-04-23
view exploit
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (Metasploit)
Critical Verified CVE-2018-7600 php José Ignacio Rojo 2018-04-17
view exploit
Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution
Critical Verified CVE-2018-7600 php Hans Topo & g0tmi1k 2018-04-13
view exploit
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC)
Critical Verified CVE-2018-7600 php Vitalii Rudnykh 2018-04-13
view exploit
Drupal 7.x Module Services – Remote Code Execution
Critical Verified php Charles Fol 2017-03-09
view exploit
Drupal Module CODER 2.5 – Remote Command Execution (Metasploit)
High php Mehmet Ince 2016-07-25
view exploit
Drupal Module Coder < 7.x-1.3/7.x-2.6 - Remote Code Execution
Critical php Raz0r 2016-07-23
view exploit
Drupal Module RESTWS 7.x – PHP Remote Code Execution (Metasploit)
Critical Verified php Mehmet Ince 2016-07-20
view exploit
Drupal < 7.34 - Denial of Service
High CVE-2014-9016;OSVDB-114870 php Javer Nieto & Andres Rojas 2014-12-01
view exploit
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session)
Critical CVE-2014-3704;OSVDB-113371 php Stefan Horst 2014-11-03
view exploit
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Remote Code Execution)
Critical Verified CVE-2014-3704;OSVDB-113371 php Stefan Horst 2014-11-03
view exploit
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User)
Critical Verified CVE-2014-3704;OSVDB-113371;SA-CORE-2014-005 php Claudio Viviani 2014-10-17
view exploit
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (PoC) (Reset Password) (2)
Critical Verified CVE-2014-3704;OSVDB-113371 php Dustin Dörr 2014-10-17
view exploit
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (PoC) (Reset Password) (1)
Critical Verified CVE-2014-3704;SA-CORE-2014-005 php stopstene 2014-10-16
view exploit
Drupal Module CKEditor < 4.1WYSIWYG (Drupal 6.x/7.x) - Persistent Cross-Site Scripting
High OSVDB-93492 php r0ng 2013-05-17
view exploit
Drupal Module Drag & Drop Gallery 6.x-1.5 – ‘upload.php’ Arbitrary File Upload
Critical Verified php Sammy FORGIT 2012-06-25
view exploit
Drupal 7.12 – Multiple Vulnerabilities
High OSVDB-80665;CVE-2007-6752 php Ivano Binetti 2012-03-02
view exploit
Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting
High Verified OSVDB-82463 php MaXe 2012-01-19
view exploit
Drupal Module Cumulus 5.x-1.1/6.x-1.4 – ‘tagcloud’ Cross-Site Scripting
High Verified php MustLive 2011-02-23
view exploit
Drupal Module CAPTCHA – Security Bypass
High Verified php anonymous 2011-02-11
view exploit
Drupal Module Embedded Media Field/Media 6.x : Video Flotsam/Media: Audio Flotsam – Multiple Vulnerabilities
High Verified php Justin Klein Keane 2010-12-08
view exploit
Drupal < 5.22/6.16 - Multiple Vulnerabilities
High Verified php David Rothstein 2010-03-04
view exploit
Drupal 6.15 – Multiple Persistent Cross-Site Scripting Vulnerabilities
High Verified php emgent 2010-01-07
view exploit
Drupal 5.21/6.16 – Denial of Service
High Verified php emgent 2009-12-31
view exploit
Drupal Module Sections – Cross-Site Scripting
High Verified CVE-2009-4429;OSVDB-61107 php Justin C. Klein Keane 2009-12-16
view exploit
Drupal Module Sections 5.x-1.2/6.x-1.2 – HTML Injection
High Verified CVE-2009-4429;OSVDB-61107 php Justin C. Klein Keane 2009-12-16
view exploit
Drupal Module Ajax Checklist 5.x-1.0 – Multiple SQL Injections
Critical Verified CVE-2008-5998;OSVDB-48521 php Justin C. Klein Keane 2008-09-24
view exploit
Drupal 5.2 – PHP Zend Hash ation Vector
High Verified OSVDB-43656;CVE-2007-5416 php ShAnKaR 2007-10-10
view exploit
Drupal 4.7 – ‘Attachment mod_mime’ Remote Command Execution
High Verified OSVDB-25909;CVE-2006-2743 php rgod 2006-05-24
view exploit
Drupal 4.x – URL-Encoded Input HTML Injection
High Verified php liz0 2006-01-01
view exploit
Drupal 4.1/4.2 – Cross-Site Scripting
High Verified php Ferruh Mavituna 2003-07-21
view exploit
Drupal 4.0 – News Message HTML Injection
High Verified CVE-2002-1806;OSVDB-59300 php [email protected] 2002-09-25
view exploit