EIP-2026-104721
PRE-CVEDrupal Module RESTWS 7.x - PHP Remote Code Execution (Metasploit)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-104721. PoCs published by Mehmet Ince.
AI-analyzed exploit summary This Metasploit module exploits a vulnerability in the Drupal RESTWS module (7.x) by sending a crafted GET request to execute arbitrary PHP code via the 'passthru' function. The exploit leverages improper input validation in the module's page callbacks to achieve remote code execution.
Description
Drupal Module RESTWS 7.x - PHP Remote Code Execution (Metasploit)
Exploits (1)
This Metasploit module exploits a vulnerability in the Drupal RESTWS module (7.x) by sending a crafted GET request to execute arbitrary PHP code via the 'passthru' function. The exploit leverages improper input validation in the module's page callbacks to achieve remote code execution.