CN
CyberNewsUz
Threat Intelligence Portal
LOADING0%
CyberNewsUz
Threat Intelligence Portal
CyberNewsUz
Threat Intelligence Portal
Util/PHP/eval-stdin.php PHPUnit-da 4.8.28-dan oldin va 5.x-dan 5.6.3-dan oldin masofaviy tajovuzkorlarga HTTP POST ma'lumotlari orqali o'zboshimchalik bilan PHP kodini bajarishga imkon beradi, buni /vendor.e papkasiga, tashqi kirish ruxsati ochiq bo'lgan saytga qilingan hujumda ko'rsatilishi mumkin. /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.
Vendor
Phpunit Project
Product
Phpunit
CVSS Score
9.8
Nashr sanasi
27-iyn, 2017
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H