CveMateVulnerability intelligence

CVE-2014-3704: debian debian_linux SQL Injection

CVSS: 7.5v2.0HighModified

AliasesMGASA-2014-0423UBUNTU-CVE-2014-3704DSA-3051-1

Published 16-10-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-3704 is a high (CVSS 7.5) SQL Injection vulnerability in debian debian_linux. EPSS estimates a 99.97% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 13 public exploits are recorded.

Overall risk

60/100

0100

High · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

99.97%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits13reference, exploit-database, metasploit

Timeline

16-10-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

99.97%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 99.97% on 19-09-2026

19-09-202619-10-2026

EPSS score

99.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

13 found

referenceUnverified
Exploit Reference (seclists.org)
Maturity: unknown
referenceUnverified
Exploit Reference (sektioneins.de)
Maturity: unknown
referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown

Show all 13 exploits

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (sektioneins.de)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
exploit-databasephpVerified
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User)
Maturity: poc
exploit-databasephpUnverified
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session)
Maturity: poc
exploit-databasephpVerified
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (PoC) (Reset Password) (1)
Maturity: poc
exploit-databasephpVerified
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (PoC) (Reset Password) (2)
Maturity: poc
exploit-databasephpVerified
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Remote Code Execution)
Maturity: poc
MetasploitremoteVerified
Drupal HTTP Parameter Key/Value SQL Injection
exploit/multi/http/drupal_drupageddon
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Affected systems

Debian2 products

drupal7< 7.14-2+deb7u7
debian_linuxEOL7.0

Mageia2 products

drupal< 7.32-1.mga3
drupal< 7.32-1.mga4

Drupal1 product

drupal≥ 7.0, < 7.32

Ubuntu1 product

drupal7< 7.26-1ubuntu0.1

4 vendors · 6 products

References

24 links

www.drupal.org/SA-CORE-2014-005X Refsource CONFIRMPatchVendor AdvisoryWEBREPORT
seclists.org/fulldisclosure/2014/Oct/75Mailing ListX Refsource FULLDISCExploitPatchThird Party Advisory
www.securityfocus.com/archive/1/533706/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.sektioneins.de/en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.htmlX Refsource MISCExploitPatchThird Party AdvisoryREPORT
www.exploit-db.com/exploits/34984ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/35150ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.openwall.com/lists/oss-security/2014/10/15/23Mailing ListX Refsource MLISTExploitPatchREPORT
secunia.com/advisories/59972Third Party AdvisoryX Refsource SECUNIA
packetstormsecurity.com/files/128741/Drupal-HTTP-Parameter-Key-Value-SQL-Injection.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/34992ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry

Show all 24 references

www.debian.org/security/2014/dsa-3051Vendor AdvisoryX Refsource DEBIANThird Party AdvisoryWEB
www.securityfocus.com/bid/70595VDB EntryX Refsource BIDThird Party Advisory
www.exploit-db.com/exploits/34993ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/128721/Drupal-7.31-SQL-Injection.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
osvdb.org/show/osvdb/113371VDB EntryX Refsource OSVDBBroken Link
www.sektioneins.de/en/blog/14-11-03-drupal-sql-injection-vulnerability-PoC.htmlX Refsource MISCExploitThird Party Advisory
packetstormsecurity.com/files/128720/Drupal-7.X-SQL-Injection.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
advisories.mageia.org/MGASA-2014-0423.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=14298REPORT
www.drupal.org/drupal-7.32WEB
www.drupal.org/drupal-7.32-release-notesWEB
www.sektioneins.com/en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.htmlAdvisory
ubuntu.com/security/CVE-2014-3704REPORT
www.cve.org/CVERecord?id=CVE-2014-3704REPORT