Phpunit vulnerabilities
1 known vulnerability in Phpunit from Phpunit Project. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
PHPUnit Command Injection Exploited
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ext