PHPUnit Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for PHPUnit products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

1

Beyond CISA KEV

0

Sensor Observed

0

Virtual Patch Available

0

PHPUnit KEVs Added by Year

Loading...

1 PHPUnit KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2017-9841

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data...

Confirmed In CISA 15 Feb 2022

Common Vulnerability Classes (CWE)

  • CWE-94 — Improper Control of Generation of Code ('Code Injection') 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology