Exposures › CVE-2017-9841

CVE-2017-9841

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2022-02-15
Reference
⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

Players implicated

PHPUnit · vendorPHPUnit · product

Description

PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.