Variant 1

e open CHANGELOG.txt and see version of drupal is 7.2

Search Drupal 7.2 exploit’

We get a python exploit to add new admin user:

https://www.exploit-db.com/exploits/34992/

Download python script

Run the command

Python 34992.txt -t {url} -u newusername -p password

As /products is where the Drupal 7.2 is installed

Admin account is created, we can now login and gain complete access to website

Last updated