Src Util Php Eval-stdin.php |link|: Index Of Vendor Phpunit Phpunit

In vulnerable versions, this specific script uses eval() to execute whatever is sent to it via raw HTTP POST data (specifically using the php://input wrapper).

was designed to process code during testing. However, in vulnerable versions, it fails to verify who is sending the request. An attacker can send a simple index of vendor phpunit phpunit src util php eval-stdin.php