U.S. Dept Of Defense: Install.php File Exposure on Drupal

In the security assessment, it was discovered that the install.php file located at ██████/core/install.php is accessible and returns a 200 status code. Since the installation process is not possible, it is essential to address the vulnerability of the install.php file as soon as possible to prevent potential attacks and ensure the availability of the website. It is important to take measures to remove or secure the file to prevent it from being accessed by attackers and causing a denial of service attack. This is crucial to prevent the website from crashing and overwhelming the system, which can lead to serious problems for the website and its users. Obs: * Use the drupwn tool, found at https://github.com/immunIT/drupwn * Run the command: python3 ./drupwn --mode enum --target ██████/ * The tool will reveal the install.php script with a status of 200 OK. ████ Summary The install.php file, which is meant to be removed after the initial installation of Drupal, has been left in place and is accessible to attackers. This file can be used to reinstall the website, potentially leading to data loss or other issues. Additionally, it was observed that the website encountered an unexpected error of Drupal\Component\Plugin\Exception\PluginNotFoundException: Unable to determine class for field type 'comment' which can be used to escalate privilege and access sensitive information. Proof Of Concept Proof of Concept: A screenshot demonstrating the install.php file being accessible and...