Skip to content
OpenAdvisories
Critical 1 exploited CVE USN-7171-1 1 CVE

phpunit vulnerability

Published Dec 18, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that PHPUnit incorrectly handled web requests if exposed
to the internet. An attacker could possibly use this issue to achive remote
code execution or obtain sensitive information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS phpunit 5.1.3-1+ubuntu3+esm1

Vulnerabilities 1

  • Critical 9.8
    CVE-2017-9841 Exploited Public exploit Scanner template EPSS 100%

    Code Injection in PHPUnit

    Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…

    phpunit/phpunit phpunit phpunit Debian Ubuntu Packagist
    KEV Feb 15, 2022

References

  • report
    https://ubuntu.com/security/CVE-2017-9841