VulnScan

CVE-2014-3704

Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.

Analyzing data...

Overview

Original source data

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.

Affected products and scope

Analyzing data...

Technical details

Analyzing data...

Exploitability

Analyzing data...

Technical impact

Analyzing data...

Business impact

Analyzing data...

Remediation

Analyzing data...

Detection

Analyzing data...
Sources (23)
GCVE / Vulnerability-Lookup
CVE Program
redhat (CNA)
NVD
FIRST EPSS
Red Hat CSAF VEX
drupal.org
seclists.org
securityfocus.com
70595
sektioneins.de
14-11-03-drupal-sql-injection-vulnerability-PoC.html
exploit-db.com
351503499234993
openwall.com
secunia.com
packetstormsecurity.com
Drupal-7.31-SQL-Injection.htmlDrupal-7.X-SQL-Injection.html
debian.org
osvdb.org
Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.

Explore CyStack VulnScan

Explore other related solutions

drupal

drupal

View product

debian_linux

debian

View product
View all security vulnerabilities