Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:36:55 +0000 bdu:2021-04398 https://cve.radiocsirt.org/vuln/bdu:2021-04398 bdu:2021-04398 https://cve.radiocsirt.org/vuln/bdu:2021-04398 certfr-2017-avi-309 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Elles permettent à un attaquant… https://cve.radiocsirt.org/vuln/certfr-2017-avi-309 certfr-2017-avi-309 https://cve.radiocsirt.org/vuln/certfr-2017-avi-309 cnvd-2017-12721 https://cve.radiocsirt.org/vuln/cnvd-2017-12721 cnvd-2017-12721 https://cve.radiocsirt.org/vuln/cnvd-2017-12721 EUVD-2026-256328 https://cve.radiocsirt.org/vuln/euvd-2026-256328 EUVD-2026-256328 https://cve.radiocsirt.org/vuln/euvd-2026-256328 fkie_cve-2017-9841 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9841 <p>Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a &#34;&lt;?php &#34; substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.</p> <p>Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a &#34;&lt;?php &#34; substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9841 GHSA-r7c9-c69m-rph8 — Code Injection in PHPUnit https://cve.radiocsirt.org/vuln/ghsa-r7c9-c69m-rph8 <p><strong>Affected:</strong> Packagist: phpunit/phpunit</p> <p>Util/PHP/eval-stdin.php in PHPUnit starting with 4.8.19 and before 4.8.28, as well as 5.x before 5.6.3, allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a `&lt;?php ` substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.</p> <p><strong>Affected:</strong> Packagist: phpunit/phpunit</p> <p>Util/PHP/eval-stdin.php in PHPUnit starting with 4.8.19 and before 4.8.28, as well as 5.x before 5.6.3, allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a `&lt;?php ` substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.</p> https://cve.radiocsirt.org/vuln/ghsa-r7c9-c69m-rph8 gsd-2017-9841 https://cve.radiocsirt.org/vuln/gsd-2017-9841 gsd-2017-9841 https://cve.radiocsirt.org/vuln/gsd-2017-9841 UBUNTU-CVE-2017-9841 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9841 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: phpunit</p> <p>Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a &#34;&lt;?php &#34; substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: phpunit</p> <p>Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a &#34;&lt;?php &#34; substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9841