And see a raw list of files, including eval-stdin.php .
The flaw centers on a utility script called eval-stdin.php located in the /vendor/phpunit/phpunit/src/Util/PHP/ directory. This file was designed to read PHP code from a standard input (STDIN) stream and execute it using PHP’s eval() function. And see a raw list of files, including eval-stdin
https://example.com/vendor/phpunit/phpunit/src/Util/PHP/ ' . file_get_contents('php://stdin'))
<?php eval('?>' . file_get_contents('php://stdin')); echo 'echo "Hello from PHPUnit Utility"
echo 'echo "Hello from PHPUnit Utility";' | php vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php