Index Of Vendor Phpunit Phpunit Src Util Php Eval-stdin.php

Let’s decode the path:

9.8 (Critical) CWE: CWE-94 (Improper Control of Generation of Code) Known Exploit DB ID: EDB-ID: 46320 index of vendor phpunit phpunit src util php eval-stdin.php

In versions of PHPUnit before and 5.x before 5.6.3 , the file eval-stdin.php was included in the source code to help execute tests. However, it contains a dangerous line of code that reads raw data from an HTTP POST request and executes it directly as PHP code. PHPUnit.Eval-stdin.PHP.Remote.Code.Execution Let’s decode the path: 9

<IfModule mod_rewrite.c> RewriteEngine On RewriteRule ^vendor/.*$ - [F,L] </IfModule> RewriteEngine On RewriteRule ^vendor/.*$ - [F