Skip to content

CVE-2014-3704

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 13, 2026
Last Seen
September 13, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerabilities in Drupal Exploited70.5

Recent penetration tests revealed multiple critical vulnerabilities in Drupal, specifically CVE-2014-3704, which allows remote code execution. The tests were conducted in a controlled lab environment, demonstrating exploitation methods including SQL injection and privilege escalation. The affected s...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Sql InjectionUbuntuCWE-200 - Exposure of Sensitive InformationCWE-269 - Improper Privilege ManagementCWE-798 - Use of Hard-coded CredentialsCwe-89 - SQL InjectionApacheLinuxCurlGobusterMetasploitMsfconsole