GET https://cekilisbetso.com/?action=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-action%27%29%3E&city=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-city%27%29%3E&cont…

Response
200 OK
IP
172.70.135.165
Profiled on
Token
357d6c

HomeController :: index

Request

GET Parameters

Key Value
action 
"'>"<svg/onload=confirm('xss-action')>"
city 
"'>"<svg/onload=confirm('xss-city')>"
content 
"'>"<svg/onload=confirm('xss-content')>"
deleted 
"'>"<svg/onload=confirm('xss-deleted')>"
field 
"'>"<svg/onload=confirm('xss-field')>"
info 
"'>"<svg/onload=confirm('xss-info')>"
mail 
"'>"<svg/onload=confirm('xss-mail')>"
newname 
"'>"<svg/onload=confirm('xss-newname')>"
noconfirmation 
"'>"<svg/onload=confirm('xss-noconfirmation')>"
output 
"'>"<svg/onload=confirm('xss-output')>"
rename 
"'>"<svg/onload=confirm('xss-rename')>"
search 
"'>"<svg/onload=confirm('xss-search')>"
signature 
"'>"<svg/onload=confirm('xss-signature')>"
term 
"'>"<svg/onload=confirm('xss-term')>"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_access_control_attributes 
null
_controller 
"App\Controller\Front\HomeController::index"
_firewall_context 
"security.firewall.map.context.main"
_route 
"homepage"
_route_params 
[]
_security_authenticators 
[]
_security_skipped_authenticators 
[]
_stopwatch_token 
"dde175"

Request Headers

Header Value
accept 
"*/*"
accept-encoding 
"gzip, br"
cdn-loop 
"cloudflare; loops=1"
cf-connecting-ip 
"2a03:2880:f800:3a::"
cf-ipcountry 
"US"
cf-ray 
"9921da8838157f72-IAD"
cf-visitor 
"{"scheme":"https"}"
connection 
"Keep-Alive"
host 
"cekilisbetso.com"
user-agent 
"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
x-forwarded-for 
"2a03:2880:f800:3a::"
x-forwarded-proto 
"https"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Tue, 21 Oct 2025 15:40:29 GMT"
x-debug-token 
"357d6c"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_DEBUG 
"1"
APP_ENV 
"dev"
APP_SECRET 
"fc098392657b9a3ba3c7011712f9d7c5"
DATABASE_URL 
"mysql://root:[email protected]:3306/assetdb"
MAILER_DSN 
"null://null"
MESSENGER_TRANSPORT_DSN 
"doctrine://default"

Defined as regular env variables

Key Value
CONTENT_LENGTH 
""
CONTENT_TYPE 
""
DOCUMENT_ROOT 
"/var/www/assetmultiplication.com/public"
DOCUMENT_URI 
"/index.php"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/var/www"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_ACCEPT_ENCODING 
"gzip, br"
HTTP_CDN_LOOP 
"cloudflare; loops=1"
HTTP_CF_CONNECTING_IP 
"2a03:2880:f800:3a::"
HTTP_CF_IPCOUNTRY 
"US"
HTTP_CF_RAY 
"9921da8838157f72-IAD"
HTTP_CF_VISITOR 
"{"scheme":"https"}"
HTTP_CONNECTION 
"Keep-Alive"
HTTP_HOST 
"cekilisbetso.com"
HTTP_USER_AGENT 
"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
HTTP_X_FORWARDED_FOR 
"2a03:2880:f800:3a::"
HTTP_X_FORWARDED_PROTO 
"https"
PHP_SELF 
"/index.php"
QUERY_STRING 
"action=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-action%27%29%3E&city=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-city%27%29%3E&content=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-content%27%29%3E&deleted=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-deleted%27%29%3E&field=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-field%27%29%3E&info=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-info%27%29%3E&mail=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-mail%27%29%3E&newname=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-newname%27%29%3E&noconfirmation=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-noconfirmation%27%29%3E&output=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-output%27%29%3E&rename=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-rename%27%29%3E&search=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-search%27%29%3E&signature=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-signature%27%29%3E&term=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-term%27%29%3E"
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"172.70.135.165"
REMOTE_PORT 
"12980"
REMOTE_USER 
""
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1761061229
REQUEST_TIME_FLOAT 
1761061229.2115
REQUEST_URI 
"/?action=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-action%27%29%3E&city=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-city%27%29%3E&content=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-content%27%29%3E&deleted=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-deleted%27%29%3E&field=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-field%27%29%3E&info=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-info%27%29%3E&mail=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-mail%27%29%3E&newname=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-newname%27%29%3E&noconfirmation=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-noconfirmation%27%29%3E&output=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-output%27%29%3E&rename=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-rename%27%29%3E&search=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-search%27%29%3E&signature=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-signature%27%29%3E&term=%27%3E%22%3Csvg%2Fonload%3Dconfirm%28%27xss-term%27%29%3E"
SCRIPT_FILENAME 
"/var/www/assetmultiplication.com/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"87.248.157.56"
SERVER_NAME 
"assetmultiplication.com"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"nginx/1.18.0"
SYMFONY_DOTENV_PATH 
"/var/www/assetmultiplication.com/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_DEBUG,APP_SECRET,DATABASE_URL,MESSENGER_TRANSPORT_DSN,MAILER_DSN"
USER 
"www-data"