Vulnerability CVE-2017-9841
Published: 2017-06-27

Description:
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

See advisories in our WLB2 database:
Topic
Author
Date
High
PHP Unit 4.8.28 Remote Code Execution
souzo
04.02.2022

Type:

CWE-94

 (Improper Control of Generation of Code ('Code Injection'))

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Phpunit project -> Phpunit 

 References:
http://phpunit.vulnbusters.com/
http://www.securityfocus.com/bid/101798
http://www.securitytracker.com/id/1039812
https://github.com/sebastianbergmann/phpunit/commit/284a69fb88a2d0845d23f42974a583d8f59bf5a5
https://github.com/sebastianbergmann/phpunit/pull/1956
https://security.gentoo.org/glsa/201711-15
Copyright 2024, cxsecurity.com

 

Back to Top