https://bergmann.smeasy.de/admin/?id=-6%27%20union%20select%201%2Cmd5%28%27999999999%27%29%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11--%20&page=user%2Fmanage_user

Method
GET
HTTP Status
301
IP
47.128.127.187
Profiled on
Token
c865a5

RedirectController :: urlRedirectAction

Request

GET Parameters

Key Value
id 
"-6' union select 1,md5('999999999'),3,4,5,6,7,8,9,10,11-- "
page 
"user/manage_user"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"Symfony\Bundle\FrameworkBundle\Controller\RedirectController::urlRedirectAction"
_route 
"administration.index"
_route_params 
[
  "path" => "/admin"
  "permanent" => true
  "scheme" => null
  "httpPort" => 80
  "httpsPort" => 443
  "auth_required" => false
]
auth_required 
false
httpPort 
80
httpsPort 
443
path 
"/admin"
permanent 
true
scheme 
null

Request Headers

Header Value
accept 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"
accept-encoding 
"gzip, deflate, br"
accept-language 
"en-US,en;q=0.5"
connection 
"keep-alive"
forwarded 
"for="47.128.127.187";host="bergmann.smeasy.de";proto=https"
host 
"bergmann.smeasy.de"
sec-fetch-dest 
"document"
sec-fetch-mode 
"navigate"
sec-fetch-site 
"none"
sec-fetch-user 
"?1"
upgrade-insecure-requests 
"1"
user-agent 
"Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)"
x-forwarded-for 
"47.128.127.187"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
access-control-allow-headers 
"Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id"
access-control-allow-methods 
"GET,POST,PUT,PATCH,DELETE"
access-control-allow-origin 
"*"
content-type 
"text/html; charset=UTF-8"
date 
"Fri, 15 Nov 2024 13:50:44 GMT"
location 
"https://bergmann.smeasy.de/admin?id=-6%27%20union%20select%201%2Cmd5%28%27999999999%27%29%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11--%20&page=user%2Fmanage_user"
sw-context-token 
[
  null
]
sw-language-id 
[
  null
]
sw-version-id 
[
  null
]
x-debug-token 
"c865a5"
x-frame-options 
"deny"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_SECRET 
"def0000003f963c9dff7df9c56b958d97cfb656e07123d4478aa0b626775ef4dd92990ef52fc11e0547ac90c163b3cd433710f216aab53c962499d2aa9b86eeade16bc48"
APP_URL 
"http://bergmann.smeasy.de"
COMPOSER_HOME 
"/var/www/smeasy/html/var/cache/composer"
DATABASE_URL 
"mysql://smeasy:sm34sYMiSQP%40ss@localhost:3306/shopware"
INSTANCE_ID 
"wajturh2quvh8ZdoVbf34mcvwixp1vlo"
MAILER_URL 
"null://localhost"
SHOPWARE_CDN_STRATEGY_DEFAULT 
"id"
SHOPWARE_ES_ENABLED 
"0"
SHOPWARE_ES_HOSTS 
""
SHOPWARE_ES_INDEXING_ENABLED 
"0"
SHOPWARE_ES_INDEX_PREFIX 
"sw"
SHOPWARE_HTTP_CACHE_ENABLED 
"1"
SHOPWARE_HTTP_DEFAULT_TTL 
"7200"

Defined as regular env variables

Key Value
CONTEXT_DOCUMENT_ROOT 
"/var/www/smeasy/html/public/"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/var/www/smeasy/html/public/"
GATEWAY_INTERFACE 
"CGI/1.1"
HTTPS 
"on"
HTTP_ACCEPT 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"
HTTP_ACCEPT_ENCODING 
"gzip, deflate, br"
HTTP_ACCEPT_LANGUAGE 
"en-US,en;q=0.5"
HTTP_CONNECTION 
"keep-alive"
HTTP_FORWARDED 
"for="47.128.127.187";host="bergmann.smeasy.de";proto=https"
HTTP_HOST 
"bergmann.smeasy.de"
HTTP_SEC_FETCH_DEST 
"document"
HTTP_SEC_FETCH_MODE 
"navigate"
HTTP_SEC_FETCH_SITE 
"none"
HTTP_SEC_FETCH_USER 
"?1"
HTTP_UPGRADE_INSECURE_REQUESTS 
"1"
HTTP_USER_AGENT 
"Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)"
HTTP_X_FORWARDED_FOR 
"47.128.127.187"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
"id=-6%27%20union%20select%201%2Cmd5%28%27999999999%27%29%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11--%20&page=user%2Fmanage_user"
REDIRECT_HTTPS 
"on"
REDIRECT_QUERY_STRING 
"id=-6%27%20union%20select%201%2Cmd5%28%27999999999%27%29%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11--%20&page=user%2Fmanage_user"
REDIRECT_SSL_TLS_SNI 
"bergmann.smeasy.de"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/admin/"
REMOTE_ADDR 
"127.0.0.1"
REMOTE_PORT 
"56706"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1731678644
REQUEST_TIME_FLOAT 
1731678644.307
REQUEST_URI 
"/admin/?id=-6%27%20union%20select%201%2Cmd5%28%27999999999%27%29%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11--%20&page=user%2Fmanage_user"
SCRIPT_FILENAME 
"/var/www/smeasy/html/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"94.130.178.25"
SERVER_ADMIN 
"webmaster@localhost"
SERVER_NAME 
"bergmann.smeasy.de"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
"<address>Apache/2.4.29 (Ubuntu) Server at bergmann.smeasy.de Port 443</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.29 (Ubuntu)"
SSL_TLS_SNI 
"bergmann.smeasy.de"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,APP_URL,MAILER_URL,DATABASE_URL,COMPOSER_HOME,INSTANCE_ID,SHOPWARE_HTTP_CACHE_ENABLED,SHOPWARE_HTTP_DEFAULT_TTL,SHOPWARE_ES_HOSTS,SHOPWARE_ES_ENABLED,SHOPWARE_ES_INDEXING_ENABLED,SHOPWARE_ES_INDEX_PREFIX,SHOPWARE_CDN_STRATEGY_DEFAULT"