{"exploits":[{"source":"metasploit","id":"exploit/unix/webapp/drupal_drupalgeddon2","title":"Drupal Drupalgeddon 2 Forms API Property Injection","type":"exploit","platform":"Linux,PHP,Unix","date":"2018-03-28","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/webapp/drupal_drupalgeddon2"},{"source":"pocgithub","id":"a2u/CVE-2018-7600","title":"a2u/CVE-2018-7600","date":"2018-03-30","url":"https://github.com/a2u/CVE-2018-7600"},{"source":"pocgithub","id":"g0rx/CVE-2018-7600-Drupal-RCE","title":"g0rx/CVE-2018-7600-Drupal-RCE","date":"2018-03-30","url":"https://github.com/g0rx/CVE-2018-7600-Drupal-RCE"},{"source":"pocgithub","id":"dreadlocked/Drupalgeddon2","title":"dreadlocked/Drupalgeddon2","date":"2018-04-12","url":"https://github.com/dreadlocked/Drupalgeddon2"},{"source":"exploitdb","id":"EDB-44448","title":"Drupal \u003c 8.3.9 / \u003c 8.4.6 / \u003c 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC)","type":"webapps","platform":"php","date":"2018-04-13","verified":true,"url":"https://www.exploit-db.com/exploits/44448"},{"source":"exploitdb","id":"EDB-44449","title":"Drupal \u003c 7.58 / \u003c 8.3.9 / \u003c 8.4.6 / \u003c 8.5.1 - 'Drupalgeddon2' Remote Code Execution","type":"webapps","platform":"php","date":"2018-04-13","verified":true,"url":"https://www.exploit-db.com/exploits/44449"},{"source":"pocgithub","id":"knqyf263/CVE-2018-7600","title":"knqyf263/CVE-2018-7600","date":"2018-04-13","url":"https://github.com/knqyf263/CVE-2018-7600"},{"source":"pocgithub","id":"dr-iman/CVE-2018-7600-Drupal-0day-RCE","title":"dr-iman/CVE-2018-7600-Drupal-0day-RCE","date":"2018-04-14","url":"https://github.com/dr-iman/CVE-2018-7600-Drupal-0day-RCE"},{"source":"pocgithub","id":"dwisiswant0/CVE-2018-7600","title":"dwisiswant0/CVE-2018-7600","date":"2018-04-14","url":"https://github.com/dwisiswant0/CVE-2018-7600"},{"source":"pocgithub","id":"jirojo2/drupalgeddon2","title":"jirojo2/drupalgeddon2","date":"2018-04-14","url":"https://github.com/jirojo2/drupalgeddon2"},{"source":"pocgithub","id":"sl4cky/CVE-2018-7600","title":"sl4cky/CVE-2018-7600","date":"2018-04-15","url":"https://github.com/sl4cky/CVE-2018-7600"},{"source":"pocgithub","id":"sl4cky/CVE-2018-7600-Masschecker","title":"sl4cky/CVE-2018-7600-Masschecker","date":"2018-04-15","url":"https://github.com/sl4cky/CVE-2018-7600-Masschecker"},{"source":"pocgithub","id":"thehappydinoa/CVE-2018-7600","title":"thehappydinoa/CVE-2018-7600","date":"2018-04-15","url":"https://github.com/thehappydinoa/CVE-2018-7600"},{"source":"pocgithub","id":"firefart/CVE-2018-7600","title":"firefart/CVE-2018-7600","date":"2018-04-16","url":"https://github.com/firefart/CVE-2018-7600"},{"source":"exploitdb","id":"EDB-44482","title":"Drupal \u003c 8.3.9 / \u003c 8.4.6 / \u003c 8.5.1 - 'Drupalgeddon2' Remote Code Execution (Metasploit)","type":"remote","platform":"php","date":"2018-04-17","verified":true,"url":"https://www.exploit-db.com/exploits/44482"},{"source":"pocgithub","id":"pimps/CVE-2018-7600","title":"pimps/CVE-2018-7600","date":"2018-04-17","url":"https://github.com/pimps/CVE-2018-7600"},{"source":"pocgithub","id":"lorddemon/drupalgeddon2","title":"lorddemon/drupalgeddon2","date":"2018-04-19","url":"https://github.com/lorddemon/drupalgeddon2"},{"source":"pocgithub","id":"Hestat/drupal-check","title":"Hestat/drupal-check","date":"2018-04-24","url":"https://github.com/Hestat/drupal-check"},{"source":"pocgithub","id":"Damian972/drupalgeddon-2","title":"Damian972/drupalgeddon-2","date":"2018-05-01","url":"https://github.com/Damian972/drupalgeddon-2"},{"source":"pocgithub","id":"soch4n/CVE-2018-7600","title":"soch4n/CVE-2018-7600","date":"2018-05-25","url":"https://github.com/soch4n/CVE-2018-7600"},{"source":"pocgithub","id":"happynote3966/CVE-2018-7600","title":"happynote3966/CVE-2018-7600","date":"2018-07-12","url":"https://github.com/happynote3966/CVE-2018-7600"},{"source":"pocgithub","id":"shellord/CVE-2018-7600-Drupal-RCE","title":"shellord/CVE-2018-7600-Drupal-RCE","date":"2018-10-02","url":"https://github.com/shellord/CVE-2018-7600-Drupal-RCE"},{"source":"pocgithub","id":"r3dxpl0it/CVE-2018-7600","title":"r3dxpl0it/CVE-2018-7600","date":"2018-10-23","url":"https://github.com/r3dxpl0it/CVE-2018-7600"},{"source":"pocgithub","id":"cved-sources/cve-2018-7600","title":"cved-sources/cve-2018-7600","date":"2019-01-06","url":"https://github.com/cved-sources/cve-2018-7600"},{"source":"pocgithub","id":"madneal/codeql-scanner","title":"madneal/codeql-scanner","date":"2019-03-15","url":"https://github.com/madneal/codeql-scanner"},{"source":"pocgithub","id":"drugeddon/drupal-exploit","title":"drugeddon/drupal-exploit","date":"2019-03-24","url":"https://github.com/drugeddon/drupal-exploit"},{"source":"pocgithub","id":"shellord/Drupalgeddon-Mass-Exploiter","title":"shellord/Drupalgeddon-Mass-Exploiter","date":"2019-10-10","url":"https://github.com/shellord/Drupalgeddon-Mass-Exploiter"},{"source":"pocgithub","id":"zhzyker/CVE-2018-7600-Drupal-POC-EXP","title":"zhzyker/CVE-2018-7600-Drupal-POC-EXP","date":"2020-04-07","url":"https://github.com/zhzyker/CVE-2018-7600-Drupal-POC-EXP"},{"source":"pocgithub","id":"rabbitmask/CVE-2018-7600-Drupal7","title":"rabbitmask/CVE-2018-7600-Drupal7","date":"2020-04-12","url":"https://github.com/rabbitmask/CVE-2018-7600-Drupal7"},{"source":"pocgithub","id":"ynsmroztas/drupalhunter","title":"ynsmroztas/drupalhunter","date":"2020-06-18","url":"https://github.com/ynsmroztas/drupalhunter"},{"source":"pocgithub","id":"ruthvikvegunta/Drupalgeddon2","title":"ruthvikvegunta/Drupalgeddon2","date":"2020-08-10","url":"https://github.com/ruthvikvegunta/Drupalgeddon2"},{"source":"pocgithub","id":"ludy-dev/drupal8-REST-RCE","title":"ludy-dev/drupal8-REST-RCE","date":"2020-08-31","url":"https://github.com/ludy-dev/drupal8-REST-RCE"},{"source":"pocgithub","id":"0xAJ2K/CVE-2018-7600","title":"0xAJ2K/CVE-2018-7600","date":"2021-06-05","url":"https://github.com/0xAJ2K/CVE-2018-7600"},{"source":"pocgithub","id":"RB4C/drupalgeddon2-CVE-2018-7600","title":"RB4C/drupalgeddon2-CVE-2018-7600","date":"2021-10-27","url":"https://github.com/RB4C/drupalgeddon2-CVE-2018-7600"},{"source":"pocgithub","id":"vphnguyen/ANM_CVE-2018-7600","title":"vphnguyen/ANM_CVE-2018-7600","date":"2021-11-26","url":"https://github.com/vphnguyen/ANM_CVE-2018-7600"},{"source":"pocgithub","id":"anldori/CVE-2018-7600","title":"anldori/CVE-2018-7600","date":"2022-04-25","url":"https://github.com/anldori/CVE-2018-7600"},{"source":"pocgithub","id":"r0lh/CVE-2018-7600","title":"r0lh/CVE-2018-7600","date":"2022-12-17","url":"https://github.com/r0lh/CVE-2018-7600"},{"source":"pocgithub","id":"raytran54/CVE-2018-7600","title":"raytran54/CVE-2018-7600","date":"2024-06-12","url":"https://github.com/raytran54/CVE-2018-7600"},{"source":"pocgithub","id":"tpdlshdmlrkfmcla/CVE-2018-7600.","title":"tpdlshdmlrkfmcla/CVE-2018-7600.","date":"2025-03-19","url":"https://github.com/tpdlshdmlrkfmcla/CVE-2018-7600."},{"source":"pocgithub","id":"Dowonkwon/drupal-cve-2018-7600-poc","title":"Dowonkwon/drupal-cve-2018-7600-poc","date":"2025-04-27","url":"https://github.com/Dowonkwon/drupal-cve-2018-7600-poc"},{"source":"pocgithub","id":"M-Abid34/CVE-2018-7600","title":"M-Abid34/CVE-2018-7600","date":"2025-08-04","url":"https://github.com/M-Abid34/CVE-2018-7600"},{"source":"pocgithub","id":"rajaabdullahnasir/CVE-2018-7600-Remote-Code-Execution","title":"rajaabdullahnasir/CVE-2018-7600-Remote-Code-Execution","date":"2025-08-08","url":"https://github.com/rajaabdullahnasir/CVE-2018-7600-Remote-Code-Execution"},{"source":"pocgithub","id":"muhammedkayag/CVE-2018-7600","title":"muhammedkayag/CVE-2018-7600","date":"2025-08-12","url":"https://github.com/muhammedkayag/CVE-2018-7600"},{"source":"pocgithub","id":"xxxTectationxxx/CVE-2018-7600","title":"xxxTectationxxx/CVE-2018-7600","date":"2025-08-12","url":"https://github.com/xxxTectationxxx/CVE-2018-7600"},{"source":"pocgithub","id":"SyedGhufranRaza/CVE-2018-7600-Remote-Code-Execution","title":"SyedGhufranRaza/CVE-2018-7600-Remote-Code-Execution","date":"2025-08-20","url":"https://github.com/SyedGhufranRaza/CVE-2018-7600-Remote-Code-Execution"},{"source":"pocgithub","id":"nika0x38/CVE-2018-7600","title":"nika0x38/CVE-2018-7600","date":"2025-09-21","url":"https://github.com/nika0x38/CVE-2018-7600"},{"source":"pocgithub","id":"tea-celikik/Drupal-Exploit-Lab","title":"tea-celikik/Drupal-Exploit-Lab","date":"2025-09-24","url":"https://github.com/tea-celikik/Drupal-Exploit-Lab"},{"source":"pocgithub","id":"4l13n-DN/POC-CVE-2018-7600","title":"4l13n-DN/POC-CVE-2018-7600","date":"2025-12-08","url":"https://github.com/4l13n-DN/POC-CVE-2018-7600"},{"source":"pocgithub","id":"bixiPRO/Drupalgeddon2-CVE-2018-7600","title":"bixiPRO/Drupalgeddon2-CVE-2018-7600","date":"2026-02-10","url":"https://github.com/bixiPRO/Drupalgeddon2-CVE-2018-7600"},{"source":"pocgithub","id":"Meraj1312/cve-2018-7600-drupalgeddon2-lab","title":"Meraj1312/cve-2018-7600-drupalgeddon2-lab","date":"2026-03-12","url":"https://github.com/Meraj1312/cve-2018-7600-drupalgeddon2-lab"},{"source":"pocgithub","id":"erman-bolukbasi/web-penetration-drupal","title":"erman-bolukbasi/web-penetration-drupal","date":"2026-03-26","url":"https://github.com/erman-bolukbasi/web-penetration-drupal"},{"source":"pocgithub","id":"Dungsocool/CVE-2018-7600","title":"Dungsocool/CVE-2018-7600","date":"2026-05-30","url":"https://github.com/Dungsocool/CVE-2018-7600"},{"source":"pocgithub","id":"nayem-m/drupalgeddon2-cli","title":"nayem-m/drupalgeddon2-cli","date":"2026-06-10","url":"https://github.com/nayem-m/drupalgeddon2-cli"},{"source":"pocgithub","id":"Prapul1/VulnHub-DC1-Writeup","title":"Prapul1/VulnHub-DC1-Writeup","date":"2026-06-25","url":"https://github.com/Prapul1/VulnHub-DC1-Writeup"},{"source":"pocgithub","id":"Shams-Ul-Mehmood/CVE-2018-7600-Drupalgeddon2-RCE","title":"Shams-Ul-Mehmood/CVE-2018-7600-Drupalgeddon2-RCE","date":"2026-08-06","url":"https://github.com/Shams-Ul-Mehmood/CVE-2018-7600-Drupalgeddon2-RCE"},{"source":"pocgithub","id":"elkhaoudari/CVE-2018-7600-PoC","title":"elkhaoudari/CVE-2018-7600-PoC","date":"2026-08-20","url":"https://github.com/elkhaoudari/CVE-2018-7600-PoC"},{"source":"pocgithub","id":"Aihikk/DC-1_Vulnhub_Walkthrough","title":"Aihikk/DC-1_Vulnhub_Walkthrough","date":"2026-10-03","url":"https://github.com/Aihikk/DC-1_Vulnhub_Walkthrough"},{"source":"pocgithub","id":"CyberCTF/vulhub-drupal-cve-2018-7600","title":"CyberCTF/vulhub-drupal-cve-2018-7600","date":"2026-10-08","url":"https://github.com/CyberCTF/vulhub-drupal-cve-2018-7600"},{"source":"pocgithub","id":"SanCody/DC1-Penetration-Testing-Report","title":"SanCody/DC1-Penetration-Testing-Report","date":"2026-10-14","url":"https://github.com/SanCody/DC1-Penetration-Testing-Report"},{"source":"pocgithub","id":"Alexnpc18/Drupalgeddon2-python","title":"Alexnpc18/Drupalgeddon2-python","date":"2026-10-22","url":"https://github.com/Alexnpc18/Drupalgeddon2-python"},{"source":"nuclei","id":"CVE-2018-7600","title":"Drupal - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7600.yaml"}]}