EPSS
Percentile
93.0%
phpwhois/phpwhois is vulnerable to arbitrary code execution attacks. The application unsafely uses the PH function eval, allowing a malicious user to inject and execute arbitrary PHP code through it.
eval
blog.nettitude.com/uk/cve-2015-5243-phpwhois-remote-code-execution
github.com/jsmitty12/phpWhois/commit/8aa8f208388f551aa6a141981bcfe508246c0fe4
github.com/jsmitty12/phpWhois/issues/19