[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_qMQAFgQITmky6FhSWsn2KarT8aWMxoy3igwjhg6bb4":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":36,"topProductsByCves":42,"seoMetadata":44,"meta":53},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":9,"versionCount":11,"lastCveUpdate":12,"firstLetter":13,"products":14,"description":18},24732,"phpunit_project",1,2,923,"2017-06-27","p",[15],{"id":16,"product_name":17,"version_count":11,"cve_count":10,"kev_count":9,"last_cve_update":12},128979,"phpunit","Phpunit_project is a technology vendor with 1 tracked product and 2 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,27],{"cveId":21,"description":22,"publishedDate":12,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":4,"epssScore":26},"CVE-2017-9841","Util\u002FPHP\u002Feval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a \"\u003C?php \" substring, as demonstrated by an attack on a site with an exposed \u002Fvendor folder, i.e., external access to the \u002Fvendor\u002Fphpunit\u002Fphpunit\u002Fsrc\u002FUtil\u002FPHP\u002Feval-stdin.php URI.",9.8,"v3.1","Critical",0.99999,{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":35},"CVE-2013-4744","Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","2013-07-01",4.3,"v2","Medium",false,0.01395,[37],{"cveId":21,"description":22,"publishedDate":12,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":4,"epssScore":26,"cisaVulnName":38,"cisaDateAdded":39,"cisaShortDescription":40,"cisaRequiredAction":41},"PHPUnit Command Injection Vulnerability","2022-02-15","PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a \"\u003C?php \" substring, as demonstrated by an attack on a site with an exposed \u002Fvendor folder, i.e., external access to the \u002Fvendor\u002Fphpunit\u002Fphpunit\u002Fsrc\u002FUtil\u002FPHP\u002Feval-stdin.php URI.","Apply updates per vendor instructions.",[43],{"id":16,"product_name":17,"version_count":11,"cve_count":10,"kev_count":9,"last_cve_update":12},{"title":45,"metaDescription":46,"keywords":47,"structuredData":48},"Phpunit_project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Phpunit_project covering 1 product with 2 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Phpunit_project vulnerabilities, Phpunit_project security, Phpunit_project CVE, Phpunit_project threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Phpunit_project KEV, Phpunit_project exploited vulnerabilities",{"@context":49,"@type":50,"name":51,"description":46,"url":52},"https:\u002F\u002Fschema.org","Organization","Phpunit_project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fphpunit_project",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":12,"generatedAt":54,"apiVersion":55},"2026-10-18T19:38:56.182Z","3.0"]