Drupal Core PHP Deserialization Remote Code Execution

This strike exploits a vulnerability in Drupal Core open-source CMS. The vulnerability is due to improper validation of user-supplied data while performing server-side deserialization of PHP objects. A malicious user can exploit this vulnerability by sending multiple HTTP POST requests including serialized PHP objects. When successfuly exploited, the vulnerability results in complete compromise of the target server.