https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 19:43:47 +0000 https://vulnerability.circl.lu/vuln/cve-2017-9841 <p>Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a &#34;&lt;?php &#34; substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.</p> <p>Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a &#34;&lt;?php &#34; substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.</p> https://vulnerability.circl.lu/vuln/cve-2017-9841 https://vulnerability.circl.lu/vuln/usn-7171-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: phpunit</p> <p>It was discovered that PHPUnit incorrectly handled web requests if exposed to the internet. An attacker could possibly use this issue to achive remote code execution or obtain sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: phpunit</p> <p>It was discovered that PHPUnit incorrectly handled web requests if exposed to the internet. An attacker could possibly use this issue to achive remote code execution or obtain sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-7171-1