TI-2026-30125 CVE-2026-41570 · GHSA-qrr6-mg7r-m243
PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes
Priority HIGH 69
PHPUnit is a testing framework for PHP.
4 records
PHPUnit is a testing framework for PHP.
PHPUnit is a testing framework for PHP.
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site w…
Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.