VulnerabilitycriticalExploited in the wild

Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency Miners

The Hacker Newsby @TheHackersNewsApr 18, 2018 · 09:50 UTC (Apr 18, 2018)2 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2018-7600 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-7600 CVE-2017-10271

Tags: cve-2018-7600 cve-2017-10271 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-10271	Unauthenticated Remote Code Execution in Oracle WebLogic Server	7.5	100%	KEVRansomwarePoC ×3	Oct 19, 2017 KEV Feb 10, 2022
CVE-2018-7600	Unauthenticated Remote Code Execution in Drupal Core (Drupalgeddon 2)	9.8	100%	KEVRansomwarePoC ×4	Mar 29, 2018 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

The Drupal vulnerability (CVE-2018-7600), dubbed Drupalgeddon2 that could allow attackers to completely take over vulnerable websites has now been exploited in the wild to deliver malware backdoors and cryptocurrency miners.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.