1 results (0.002 seconds)

CVSS: 9.8EPSS: 94%CPEs: 3EXPL: 17

27 Jun 2017 — Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "