Description
PHPUnit是其中的一个基于PHP的测试框架。
PHPUnit eval-stdin.php 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/vulhub/vulhub/blob/master/phpunit/CVE-2017-9841/README.zh-cn.md
https://zhuanlan.zhihu.com/p/20347974367
https://comate.baidu.com/zh/page/w24izeyik8h
https://blog.csdn.net/rainy/article/details/150086018
https://stack.chaitin.com/vuldb/detail/4bb87da6-0e4e-49a0-b4d3-184660a731d2
https://peiqi.wgpsec.org/wiki/frame/PHPUnit/PHPUnit%20eval-stdin.php%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2017-9841.html
https://zgao.top/cve-2017-9841-phpunit-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/
https://developer.aliyun.com/article/1099627
https://nvd.nist.gov/vuln/detail/cve-2017-9841
https://support.alertlogic.com/hc/en-us/articles/115005711043-PHPUnit-eval-stdin-php-Unauthenticated-RCE