© AEMET. Autorizado el uso de la información y su reproducción citando a AEMET como autora de la misma.
File: phpunit/src/Util/PHP/eval-stdin.php
#!/usr/bin/env php <?php eval('?>'.file_get_contents('php://input')); This script would read from php://input (raw POST data) and execute it as PHP code - no authentication, no restrictions. Attackers could send a POST request containing PHP code to eval-stdin.php :
File: phpunit/src/Util/PHP/eval-stdin.php
#!/usr/bin/env php <?php eval('?>'.file_get_contents('php://input')); This script would read from php://input (raw POST data) and execute it as PHP code - no authentication, no restrictions. Attackers could send a POST request containing PHP code to eval-stdin.php :
