PHPUnit.Eval-stdin.PHP.Remote.Code.Execution - FortiGuard Labs
: You might be looking for a specific utility within PHPUnit (a testing framework for PHP) and trying to locate or execute a PHP script ( evalstdinphp ) within that context. index of vendor phpunit phpunit src util php evalstdinphp
// ... potential namespace definitions ... PHPUnit
). This flaw exists in older versions of PHPUnit and allows unauthenticated attackers to execute arbitrary PHP code on a server if the directory is publicly accessible. The PHPUnit Exploit: Why Your Folder Is a Goldmine for Hackers send it some code
PHPUnit is a testing framework. To run tests in isolated processes, PHPUnit sometimes needs to spin up a separate PHP process, send it some code, and capture the output. The eval-stdin.php file was written to facilitate this.