Approved changes feed: RSS · Atom
cpe:2.3:a:phpunit_project:phpunit:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Phpunit Project (d02bd246-60e9-5726-8dee-850cba392976) |
|---|---|
| Product | Phpunit (f19acd54-faa2-59dc-afcc-bfa97563055a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/oliverklee/ext-phpunit |
purl2cpe | 2026-06-01 10:15:31.294881 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-9841 |
vulnerable | 2026-06-08 05:10:10.695427 |
Details available
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.
Published: 2017-06-27T17:00:00.000Z
Updated: 2025-10-21T23:55:39.301Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.