Index Of Vendor Phpunit Phpunit Src Util Php Eval-stdin.php 〈UPDATED | 2024〉
PHPUnit is a unit testing framework for the PHP programming language. It is an instance of the xUnit architecture for unit testing frameworks. PHPUnit was written by Sebastian Bergmann and is now maintained by the PHPUnit Development Team.
Apache (.htaccess or httpd.conf):
<Directory "/path/to/project/vendor">
Require all denied
</Directory>
Nginx:
location ~ /vendor/
deny all;
return 403;
End of Report
Given the path "vendor/phpunit/phpunit/src/util/php/eval-stdin.php", it seems like you're working within a Composer-managed project, where PHPUnit is installed as a dependency. index of vendor phpunit phpunit src util php eval-stdin.php
The presence of vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php in a production web root is a severe security misconfiguration. It effectively provides an unauthenticated web shell. Organizations must ensure that: PHPUnit is a unit testing framework for the
CVSS 3.1 Score: 9.8 (Critical)
CWE: CWE-94 (Improper Control of Generation of Code)
Known Exploit DB ID: EDB-ID: 46320 End of Report
