Vulnerabilidades do Composer Phpunit/phpunit
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Composer Phpunit/phpunit: 1 registro(s), com versões afetadas e correções.
CVE-2017-9841
Crítica · 9.8
KEV Urgente · 75 Exploit público CWE-94 27/06/2017
PHPUnit Command Injection Vulnerability
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.