PHPUnit Remote Code Execution (CVE-2017-9841) ... PHPUnit is a programmer-oriented testing framework for PHP. Util/PHP/eval-stdin. Undetected HackTheBox WalkThrough - Ethicalhacs.com
An attacker can send a POST request containing arbitrary PHP commands (like system('id'); PHPUnit Remote Code Execution (CVE-2017-9841)
: Be cautious with scripts that can execute arbitrary code. Limit their exposure and ensure they are not accessible to unauthorized users. PHPUnit Remote Code Execution (CVE-2017-9841)
The issue resides in how older versions of PHPUnit handle input in the eval-stdin.php file. PHPUnit Remote Code Execution (CVE-2017-9841)
grep "evalStdin.php" /var/log/apache2/access.log grep "php://stdin" /var/log/audit/audit.log