Drupal Vulnerability

This NCC Group advisory (published 16 October 2014) warns of CVE-2014-3704 — an unauthenticated SQL injection in Drupal 7 (pre-7.32) that can enable administrative takeover and server compromise. The post notes public PoCs, reports active exploitation, and supplies a Snort rule to detect attempts to modify the Drupal users table; immediate patching of Internet-facing and internal Drupal 7 instances is recommended.