jax7sec/cve-2017-9841Batch scanner and exploitation script for CVE-2017-9841, a PHPUnit remote code execution vulnerability triggered via HTTP POST requests with PHP payloads.
CVE-2017-9841 batch scanning and exploitation script. PHPUnit is a PHP-based testing framework. There is a security vulnerability in the Util/PHP/eval-stdin.php file in PHPUnit versions prior to 4.8.28 and 5.x versions prior to 5.6.3. Remote attackers can exploit this vulnerability by sending HTTP POST data starting with the '<?php' string to execute arbitrary PHP code.
