Test ID:	1.3.6.1.4.1.25623.1.0.108439
Category:	Web application abuses
Title:	PHPUnit 'CVE-2017-9841' RCE Vulnerability (HTTP) - Active Check
Summary:	PHPUnit is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: PHPUnit is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The flaw exists because Util/PHP/eval-stdin.php in PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a ' substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI. Vulnerability Impact: Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Affected Software/OS: - PHPUnit before 4.8.28 and 5.x before 5.6.3 in general. - PHPUnit before 7.5.19 and 8.x before 8.5.1 if running in a CGI / FastCGI context. The following products or their (3rdparty) modules are known to ship these affected versions: - Drupal - MediaWiki - Moodle - WordPress - PrestaShop - ownCloud (only 3rdparty apps) - Laravel Solution: Update to PHPUnit 7.5.19, 8.5.1 or later. Some vendors shipping PHPUnit have released updates. Please see the references for more information. A possible mitigation is to delete the affected 'eval-stdin.php' file from the mentioned folder(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9841 BugTraq ID: 101798 http://www.securityfocus.com/bid/101798 https://security.gentoo.org/glsa/201711-15 http://web.archive.org/web/20170701212357/http://phpunit.vulnbusters.com/ https://github.com/sebastianbergmann/phpunit/commit/284a69fb88a2d0845d23f42974a583d8f59bf5a5 https://github.com/sebastianbergmann/phpunit/pull/1956 https://www.oracle.com/security-alerts/cpuoct2021.html http://www.securitytracker.com/id/1039812
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.