Back to KEVs

CVE-2017-9841

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data...

Basic Information

CVE State: PUBLISHED
Reserved Date: June 24, 2017
Published Date: June 27, 2017
Last Updated: February 07, 2025
Vendor: n/a
Product: n/a
Description: Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "

CVSS Scores

SSVC Information

Exploitation: active
Automatable: Yes
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (added 2022-02-15 00:00:00 UTC) Source
Proof of Concept Available: Yes (added 2020-06-24 09:37:04 UTC) Source

References

http://www.securityfocus.com/bid/101798 http://www.securitytracker.com/id/1039812 https://security.gentoo.org/glsa/201711-15 https://www.oracle.com/security-alerts/cpuoct2021.html https://github.com/sebastianbergmann/phpunit/commit/284a69fb88a2d0845d23f42974a583d8f59bf5a5 https://github.com/sebastianbergmann/phpunit/pull/1956 http://web.archive.org/web/20170701212357/http://phpunit.vulnbusters.com/

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-02-15 00:00:00 UTC

Scanner Integrations

Scanner	URL	Date Detected
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9841.yaml	2025-04-26 00:00:00 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

Chocapikk/CVE-2017-9841

Type: github • Created: 2023-08-27 21:20:19 UTC • Stars: 4

PHPUnit RCE

MrG3P5/CVE-2017-9841

Type: github • Created: 2023-03-13 07:42:32 UTC • Stars: 4

A Tool for scanning CVE-2017-9841 with multithread

dream434/CVE-2017-9841

Type: github • Created: 2022-11-21 16:36:48 UTC • Stars: 1

CVE-2017-9841

jax7sec/CVE-2017-9841

Type: github • Created: 2022-04-20 07:01:20 UTC • Stars: 0

CVE-2017-9841批量扫描及利用脚本。PHPUnit是其中的一个基于PHP的测试框架。 PHPUnit 4.8.28之前的版本和5.6.3之前的5.x版本中的Util/PHP/eval-stdin.php文件存在安全漏洞。远程攻击者可通过发送以‘<?php’字符串开头的HTTP POST数据利用该漏洞执行任意PHP代码。

p1ckzi/CVE-2017-9841

Type: github • Created: 2022-04-09 11:12:58 UTC • Stars: 2

phpunit-shell | CVE_2017-9841

akr3ch/CVE-2017-9841

Type: github • Created: 2022-03-20 07:01:52 UTC • Stars: 2

RCE exploit for PHP Unit 5.6.2

cyberharsh/Php-unit-CVE-2017-9841

Type: github • Created: 2020-06-24 09:37:04 UTC • Stars: 0

mbrasile/CVE-2017-9841

Type: github • Created: 2020-01-06 23:27:15 UTC • Stars: 0

CVE-2017-9841 detector script