Back to the CVE list
CVE-2017-9841 CISA KEV · Actively exploited

php-phpunit-PHPUnit: allows attackers to execute arbitrary PHP code via HTTP POST data

CVSS score

8.8

EPSS probability

%100.0

Risk score

17.6

Published

9 y ago

OverviewPublic Exploits (16)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
RandomRobbieBF/phpunit-brute
GitHub

Tool to try multiple paths for PHPunit RCE CVE-2017-9841 (★24)

Public PoCSource updated: 27.04.2022 12:43:55
G
rodnt/laravel-phpunit-rce-masscaner
GitHub

Masscanner for Laravel phpunit RCE CVE-2017-9841 (★15)

Public PoCSource updated: 17.03.2022 00:48:08
G
ludy-dev/PHPUnit_eval-stdin_RCE
GitHub

(CVE-2017-9841) PHPUnit_eval-stdin_php Remote Code Execution (★3)

Public PoCSource updated: 18.04.2022 15:05:15
G
MrG3P5/CVE-2017-9841
GitHub

A Tool for scanning CVE-2017-9841 with multithread (★3)

Public PoCSource updated: 12.06.2023 04:46:20
G
dream434/CVE-2017-9841-
GitHub

CVE-2017-9841 (★1)

Public PoCSource updated: 02.03.2025 01:45:32
G
mbrasile/CVE-2017-9841
GitHub

CVE-2017-9841 detector script (★0)

Public PoCSource updated: 11.01.2020 00:40:27
G
akr3ch/CVE-2017-9841
GitHub

RCE exploit for PHP Unit 5.6.2 (★0)

Public PoCSource updated: 20.03.2022 16:39:23
G
0zvxr/CVE-2017-9841
GitHub

phpunit-shell | CVE_2017-9841 (★0)

Public PoCSource updated: 09.04.2022 21:53:45
G
jax7sec/CVE-2017-9841
GitHub

CVE-2017-9841批量扫描及利用脚本。PHPUnit是其中的一个基于PHP的测试框架。 PHPUnit 4.8.28之前的版本和5.6.3之前的5.x版本中的Util/PHP/eval-stdin.php文件存在安全漏洞。远程攻击者可通过发送以‘<?php’字符串开头的HTTP POST数据利用该漏洞执行任意PHP代码。 (★0)

Public PoCSource updated: 20.04.2022 17:32:02
G
Invertebr4do/cve-2017-9841
GitHub

RCE from phpunit 5.6.2 (★0)

Public PoCSource updated: 16.06.2022 15:35:10
G
mileticluka1/eval-stdin
GitHub

Automated Exploit for CVE-2017-9841 (eval-stdin.php vulnerable file) (★0)

Public PoCSource updated: 21.10.2022 04:07:35
G
Chocapikk/CVE-2017-9841
GitHub

PHPUnit RCE (★0)

Public PoCSource updated: 28.08.2023 06:21:19
G
joelindra/Argus
GitHub

"Argus" is a security tool designed to scan a list of websites for a known vulnerability in the PHPUnit framework, specifically the CVE-2017-9841 vulnerability. The tool attempts to exploit this vulnerability to verify its existence. (★0)

Public PoCSource updated: 08.08.2025 14:21:00
G
K3ysTr0K3R/CVE-2017-9841-EXPLOIT
GitHub

A PoC exploit for CVE-2017-9841 - PHPUnit Remote Code Execution(RCE) (★0)

Public PoCSource updated: 29.06.2025 01:17:05
E
PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated)
Exploit-DB

PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated)

Exploit referenceSource updated: 02.02.2022 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9841.yaml
Nuclei

Nuclei: PHPUnit - Remote Code Execution

Exploit reference

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2017-9841"