漏洞描述
Drupal是一款用量庞大的CMS，该漏洞需要利用drupal文件模块上传文件的漏洞，伪造一个图片文件，上传，文件的内容实际是一段HTML代码，内嵌JS，这样其他用户在访问这个链接时，就可能触发XSS漏洞。
Drupal XSS漏洞(CVE-2019-6341)
PoC代码
暂无相关漏洞推荐
- CVE-2019-6340: Drupal 8 core RESTful Web Services RCE
- POC CVE-2014-3704: Drupal SQL Injection
- POC CVE-2018-7600: Drupal - Remote Code Execution
- POC CVE-2018-7602: Drupal - Remote Code Execution
- POC CVE-2018-9205: Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion
- POC CVE-2019-6340: Drupal - Remote Code Execution
- POC CVE-2024-45440: Drupal 11.x-dev - Full Path Disclosure
- POC CVE-2014-3704: Drupal SQL Injection
- POC CVE-2018-7600: Drupal Drupalgeddon 2 RCE
- POC drupal-jsonapi-user-listing: Drupal JSON:API Username Listing - Detect
- POC drupal-install: Drupal Install
- POC drupal-avatar-xss: Drupal Avatar Uploader - Cross-Site Scripting
- POC drupal7-elfinder-rce: Drupal 7 Elfinder - Remote Code Execution