Phpunit Project

Records4All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Phpunit Project records in CISA KEV

TI-2017-07214 PHPUnit Command Injection Vulnerability CRITICAL 100KEV 2022-02-15

Components

Products in the NVD configurations · select one to filter the records

Phpunit 4 records CRITICAL

Records

4 records in Phpunit · all components

TI-2017-07214 CVE-2017-9841 · GHSA-r7c9-c69m-rph8

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote…

CRITICAL 100KEV

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site w…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2017-06-27 Fixed in 4.8.28, 5.6.3 CWE-94

TI-2026-30125 CVE-2026-41570 · GHSA-qrr6-mg7r-m243

PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes

HIGH 69

PHPUnit is a testing framework for PHP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2026-05-08 Fixed in 12.5.22, 13.1.6 CWE-88

TI-2026-19966 CVE-2026-24765 · GHSA-vvj3-c3rp-c85p

PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling

LOW 36

PHPUnit is a testing framework for PHP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00384 Published 2026-01-27 Fixed in 8.5.52, 9.6.33 +3 CWE-502

TI-2013-04164 CVE-2013-4744 · GHSA-c5x3-gq36-prrp

Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3…

LOW 23

Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01395 Published 2013-07-01 Fixed in 3.5.15 CWE-79

Open these records in search →

Critical	1
High	2
Medium	1
Low	0
No CVSS	0