CVE-2017-9841

Description

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

References

https://blogs.juniper.net/en-us/security/shielding-networks-against-androxgh0st?web_view=true

https://blogs.juniper.net/en-us/security/shielding-networks-against-androxgh0st

https://www.tenable.com/blog/cybersecurity-snapshot-critical-infrastructure-orgs-cautioned-about-chinese-drones-while-water

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-016a

https://blog.aquasec.com/loony-tunables-vulnerability-exploited-by-kinsing

https://www.tenable.com/blog/cve-2017-9841-drupal-sites-exploited-using-phpunit-vulnerability-in-mailchimp-modules-psa-2019

https://www.oracle.com/security-alerts/cpuoct2021.html

https://security.gentoo.org/glsa/201711-15

https://github.com/sebastianbergmann/phpunit/pull/1956

https://github.com/sebastianbergmann/phpunit/commit/284a69fb88a2d0845d23f42974a583d8f59bf5a5

http://web.archive.org/web/20170701212357/http://phpunit.vulnbusters.com/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3