CVE-2017-9841: PHPUnit Command Injection Vulnerability

Vereiste actie (tekst van CISA, Engels)

Apply updates per vendor instructions.

Beschrijving (NVD, Engels)

PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

BRONNEN

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.