PHPUnit is a programmer-oriented testing framework for PHP. Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST …

Oct 6, 2021 · Here, somebody asked your server on 26/Sep/2021:20:13:33 +0000 for /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php. Your server answered, again, with code 401.

Jun 27, 2017 · CVE-2017-9841 : Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginni

Dec 17, 2024 · The vulnerability exists due to an insecure eval () function call in PHPUnit’s Eval-stdin.php file, which allows an attacker to execute arbitrary PHP code if they have access to the script. This …

Intrusion Prevention PHPUnit.Eval-stdin.PHP.Remote.Code.Execution Description This indicates an attack attempt against a Remote Code Execution vulnerability in PHPUnit. The vulnerability, which is …

Jun 27, 2017 · PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor …

PHPUnit eval-stdin.php remote command execution vulnerability CVE-2017-9841 Vulnerability Description In the version before PHPUnit 5.6.3, there is a remote code execution vulnerability, which …

Feb 2, 2022 · PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated). CVE-2017-9841 . webapps exploit for PHP platform

Apr 8, 2019 · 想快速复现CVE-2017-9841漏洞？本指南通过Docker一键搭建环境，提供从配置到POST请求的完整复现步骤，助你快速验证此PHPUnit远程代码执行风险。

Mar 10, 2021 · It didn't have PHPUnit on there but it tried to hit this file when it wasn't present. The same attack also tried a common attack targeting a rare Chinese PHP framework called ThinkPHP ( even …