Lucene search
WpvulndbWPVDB-ID:E2D902E3-9A38-46D1-BD3C-59F591E3419AHistoryAug 26, 2017 - 12:00 a.m.
Multiple Plugins - Unauthenticated RCE via PHPUnit
2017-08-2600:00:00
wpscan.com
80
There was an Unauthenticated Remote Code Execution (RCE) vulnerability in PHPUnit, a widely used testing framework for PHP. This vulnerability has been seen exploited in the wild.
PoC
curl -X POST --data “” http://example.com//wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
| CPE | Name | Operator | Version |
|---|---|---|---|
| jekyll-exporter | lt | 2.2.1 | |
| wp-heyloyalty | eq | * | |
| cloudflare | lt | 1.1.12 |
Related
cisa_kev
cisa_kev
PHPUnit Command Injection Vulnerability
2022-02-15 00:00:00
prion
prion
Code injection
2017-06-27 17:29:00
friendsofphp
friendsofphp
RCE vulnerability in phpunit
2016-11-13 17:52:50
RCE vulnerability in phpunit
2016-11-13 17:52:50
nuclei
nuclei
PHPUnit - Remote Code Execution
2020-08-07 08:02:28
wpexploit
wpexploit
Multiple Plugins - Unauthenticated RCE via PHPUnit
2017-08-26 00:00:00
packetstorm
packetstorm
PHP Unit 4.8.28 Remote Code Execution
2022-02-02 00:00:00
openvas
openvas
PHPUnit 'CVE-2017-9841' RCE Vulnerability (HTTP) - Active Check
2018-04-14 00:00:00
Mageia: Security Advisory (MGASA-2017-0429)
2022-01-28 00:00:00
osv
osv
CVE-2017-9841
2017-06-27 17:29:00
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
2020-01-07 17:20:47
wpvulndb
wpvulndb
github
github
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
2020-01-07 17:20:47
qualysblog
qualysblog
Risk Fact #4: Malware in your Cloud means Exploitation is underway
2023-08-29 08:02:57
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
zdt
zdt
PHP Unit 4.8.28 - Remote Code Execution (Unauthenticated) Exploit
2022-02-02 00:00:00
checkpoint_advisories
checkpoint_advisories
PHPUnit Command Injection (CVE-2017-9841)
2019-11-04 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2017-06-28 01:33:54
nessus
nessus
GLSA-201711-15 : PHPUnit: Remote code execution
2017-11-20 00:00:00
Drupal PHPUnit/Mailchimp Code Execution Vulnerability
2019-09-06 00:00:00
thn
thn
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials
2024-03-21 12:48:00
Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments
2023-11-03 13:12:00
ubuntucve
ubuntucve
CVE-2017-9841
2017-06-27 00:00:00
impervablog
impervablog
CrimeOps of the KashmirBlack Botnet – Part I
2020-10-22 13:07:28
The Resurrection of PHPUnit RCE Vulnerability
2020-02-18 18:27:41
cve
cve
CVE-2017-9841
2017-06-27 17:29:00
attackerkb
attackerkb
CVE-2017-9841
2017-06-27 00:00:00
hackerone
hackerone
8x8: Exposed PHP dependencies at ██.8x8.com
2021-03-22 17:56:43
cvelist
cvelist
CVE-2017-9841
2017-06-27 17:00:00
gentoo
gentoo
PHPUnit: Remote code execution
2017-11-19 00:00:00
debiancve
debiancve
CVE-2017-9841
2017-06-27 17:29:00
exploitdb
exploitdb
PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated)
2022-02-02 00:00:00
threatpost
threatpost
Threatlist: Hackers Turn to Python as Attack Coding Language of Choice
2018-09-27 20:08:07
ics
ics
Known Indicators of Compromise Associated with Androxgh0st Malware
2024-01-16 12:00:00
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2017-11-29 21:52:42
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2017-11-14 00:00:00
cisa
cisa
CISA Adds Nine Known Exploited Vulnerabilities to Catalog
2022-02-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
Related for WPVDB-ID:E2D902E3-9A38-46D1-BD3C-59F591E3419A