Vendor Phpunit Phpunit Src Util Php Eval-stdin.php Exploit

An attacker can exploit this by sending a specially crafted HTTP POST request to the vulnerable endpoint. Alert Logic Support Center

"Who keeps PHPUnit in production?" she muttered.

The exploit involves:

An attacker can utilize curl to execute arbitrary system commands. The following payload sends a system command to the server and expects the output in the response.