GET https://dashboard.velo.preprod.noksi.net/?module=uploads%2F..%2Fassets%2F..%2Fstatic%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

Response
200 OK
Browse referrer URL
IP
45.88.138.44
Profiled on
Token
ab0ede

HomeController :: home

Request

GET Parameters

Key Value
module 
"uploads/../assets/../static/../../../../../etc/passwd"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Controller\HomeController::home"
_firewall_context 
"security.firewall.map.context.main"
_route 
"home"
_route_params 
[]
_security_firewall_run 
"_security_main"
_stopwatch_token 
"3e0c86"

Request Headers

Header Value
accept 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8"
accept-encoding 
"gzip, deflate, br"
accept-language 
"en-US,en;q=0.9"
cache-control 
"max-age=0"
host 
"dashboard.velo.preprod.noksi.net"
origin 
"https://dashboard.velo.preprod.noksi.net"
referer 
"https://dashboard.velo.preprod.noksi.net/"
sec-ch-ua 
""Chromium";v="131", "Not_A Brand";v="24""
sec-ch-ua-mobile 
"?0"
sec-ch-ua-platform 
""Windows""
sec-fetch-dest 
"document"
sec-fetch-mode 
"navigate"
sec-fetch-site 
"cross-site"
sec-fetch-user 
"?1"
upgrade-insecure-requests 
"1"
user-agent 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Wed, 22 Apr 2026 03:07:56 GMT"
x-debug-token 
"ab0ede"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session 1

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

1 Usages
Stateless check enabled
Usage
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:41
Show trace 
[
  [
    "file" => "/home/projets/velocatching-dashboard/dist/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
    "line" => 41
    "function" => "getMetadataBag"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/home/projets/velocatching-dashboard/dist/vendor/symfony/security-core/Authorization/AuthorizationChecker.php"
    "line" => 35
    "function" => "getToken"
    "class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
    "type" => "->"
  ]
  [
    "file" => "/home/projets/velocatching-dashboard/dist/vendor/symfony/framework-bundle/Controller/AbstractController.php"
    "line" => 202
    "function" => "isGranted"
    "class" => "Symfony\Component\Security\Core\Authorization\AuthorizationChecker"
    "type" => "->"
  ]
  [
    "file" => "/home/projets/velocatching-dashboard/dist/src/Controller/HomeController.php"
    "line" => 22
    "function" => "isGranted"
    "class" => "Symfony\Bundle\FrameworkBundle\Controller\AbstractController"
    "type" => "->"
  ]
  [
    "file" => "/home/projets/velocatching-dashboard/dist/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 183
    "function" => "home"
    "class" => "App\Controller\HomeController"
    "type" => "->"
  ]
  [
    "file" => "/home/projets/velocatching-dashboard/dist/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 76
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/home/projets/velocatching-dashboard/dist/vendor/symfony/http-kernel/Kernel.php"
    "line" => 182
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/home/projets/velocatching-dashboard/dist/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
    "line" => 35
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
  [
    "file" => "/home/projets/velocatching-dashboard/dist/vendor/autoload_runtime.php"
    "line" => 29
    "function" => "run"
    "class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
    "type" => "->"
  ]
  [
    "file" => "/home/projets/velocatching-dashboard/dist/public/index.php"
    "line" => 5
    "args" => [
      "/home/projets/velocatching-dashboard/dist/vendor/autoload_runtime.php"
    ]
    "function" => "require_once"
  ]
]

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_DEFAULT_URI 
"https://dashboard.velo.preprod.noksi.net/"
APP_ENV 
"dev"
APP_SECRET 
"60a2d64b91a9b381a2f98109e0524bf1"
APP_TIMEZONE 
"Europe/Paris"
CORS_ALLOW_ORIGIN 
"^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$"
DATABASE_URL 
"mysql://velocatching-dashboard:1Oct4YqIeZOPxuNjtzvq@127.0.0.1:3306/velocatching-dashboard?serverVersion=8.0.35&charset=utf8mb4"
GOCARDLESS_ENV 
"sandbox"
GOCARDLESS_TOKEN 
"sandbox_cYY20Y4bW9YPWK326dlqfkXwWTLkP7XSqN1K1eJ5"
GOCARDLESS_WEBHOOK_SECRET 
"sWSzhksyWGdvaYZcDi6km4BxR5PZxqRumCxg97N7"
GOOGLE_API_KEY 
""
GOOGLE_AUTH_CONFIG 
"%kernel.project_dir%/google/app.json"
GOOGLE_CLIENT_ID 
""
GOOGLE_CLIENT_SECRET 
""
IMPORT_ENABLE_ASSOCIATE_BY_REFERENCE 
"1"
IMPORT_ENABLE_CREATE_UNKNOWN_PRODUCT 
"1"
IMPORT_ENABLE_ENABLE_PRODUCT_IF_STOCK 
"1"
IMPORT_MEDIA_STORAGE_SRC 
"%kernel.project_dir%/sftp/catalogue/medias/"
JWT_PASSPHRASE 
"29560559dffb185bf4be34b1b6a1ce38fb3e32984094f4ed452ae8f77c8d90f5"
JWT_PUBLIC_KEY 
"%kernel.project_dir%/config/jwt/public.pem"
JWT_SECRET_KEY 
"%kernel.project_dir%/config/jwt/private.pem"
MAILER_DSN 
"smtp://@127.0.0.1:1025"
MESSENGER_IN_CRON_MODE 
"false"
MESSENGER_TRANSPORT_DSN 
"doctrine://default?auto_setup=0"
NOTIFICATION_ADMIN_EMAIL_ADDRESS 
"admin@velocatching.fr"
NOTIFICATION_EMAIL_SENDER_ADDRESS 
"velocatching@noksi.net"
NOTIFICATION_EMAIL_SENDER_NAME 
"Vélocatching"
ORDER_FEE_FIX 
"50"
ORDER_FEE_MAX 
"0"
ORDER_FEE_MIN 
"50"
ORDER_FEE_RATE 
"10"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
CONTEXT_DOCUMENT_ROOT 
"/home/projets/velocatching-dashboard/dist/public/"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/home/projets/velocatching-dashboard/dist/public/"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
H2PUSH 
"off"
H2_PUSH 
"off"
H2_PUSHED 
""
H2_PUSHED_ON 
""
H2_STREAM_ID 
"1"
H2_STREAM_TAG 
"3297488-43-1"
HOME 
"/home/espacil8"
HTTP2 
"on"
HTTPS 
"on"
HTTP_ACCEPT 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8"
HTTP_ACCEPT_ENCODING 
"gzip, deflate, br"
HTTP_ACCEPT_LANGUAGE 
"en-US,en;q=0.9"
HTTP_CACHE_CONTROL 
"max-age=0"
HTTP_HOST 
"dashboard.velo.preprod.noksi.net"
HTTP_ORIGIN 
"https://dashboard.velo.preprod.noksi.net"
HTTP_REFERER 
"https://dashboard.velo.preprod.noksi.net/"
HTTP_SEC_CH_UA 
""Chromium";v="131", "Not_A Brand";v="24""
HTTP_SEC_CH_UA_MOBILE 
"?0"
HTTP_SEC_CH_UA_PLATFORM 
""Windows""
HTTP_SEC_FETCH_DEST 
"document"
HTTP_SEC_FETCH_MODE 
"navigate"
HTTP_SEC_FETCH_SITE 
"cross-site"
HTTP_SEC_FETCH_USER 
"?1"
HTTP_UPGRADE_INSECURE_REQUESTS 
"1"
HTTP_USER_AGENT 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
"module=uploads/../assets/../static/../../../../../etc/passwd"
REDIRECT_H2PUSH 
"off"
REDIRECT_H2_PUSH 
"off"
REDIRECT_H2_PUSHED 
""
REDIRECT_H2_PUSHED_ON 
""
REDIRECT_H2_STREAM_ID 
"1"
REDIRECT_H2_STREAM_TAG 
"3297488-43-1"
REDIRECT_HTTP2 
"on"
REDIRECT_HTTPS 
"on"
REDIRECT_QUERY_STRING 
"module=uploads/../assets/../static/../../../../../etc/passwd"
REDIRECT_SSL_TLS_SNI 
"dashboard.velo.preprod.noksi.net"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/"
REMOTE_ADDR 
"45.88.138.44"
REMOTE_PORT 
"50926"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1776827276
REQUEST_TIME_FLOAT 
1776827276.0338
REQUEST_URI 
"/?module=uploads/../assets/../static/../../../../../etc/passwd"
SCRIPT_FILENAME 
"/home/projets/velocatching-dashboard/dist/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"146.59.229.210"
SERVER_ADMIN 
"[no address given]"
SERVER_NAME 
"dashboard.velo.preprod.noksi.net"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/2.0"
SERVER_SIGNATURE 
"<address>Apache/2.4.55 (Ubuntu) Server at dashboard.velo.preprod.noksi.net Port 443</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.55 (Ubuntu)"
SSL_TLS_SNI 
"dashboard.velo.preprod.noksi.net"
SYMFONY_DOTENV_PATH 
"/home/projets/velocatching-dashboard/dist/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,APP_TIMEZONE,APP_DEFAULT_URI,DATABASE_URL,MESSENGER_TRANSPORT_DSN,MAILER_DSN,CORS_ALLOW_ORIGIN,MESSENGER_IN_CRON_MODE,GOOGLE_API_KEY,GOOGLE_CLIENT_ID,GOOGLE_CLIENT_SECRET,GOOGLE_AUTH_CONFIG,JWT_SECRET_KEY,JWT_PUBLIC_KEY,JWT_PASSPHRASE,IMPORT_ENABLE_CREATE_UNKNOWN_PRODUCT,IMPORT_ENABLE_ASSOCIATE_BY_REFERENCE,IMPORT_ENABLE_ENABLE_PRODUCT_IF_STOCK,ORDER_FEE_RATE,ORDER_FEE_FIX,ORDER_FEE_MIN,ORDER_FEE_MAX,GOCARDLESS_TOKEN,GOCARDLESS_ENV,GOCARDLESS_WEBHOOK_SECRET,NOTIFICATION_ADMIN_EMAIL_ADDRESS,NOTIFICATION_EMAIL_SENDER_NAME,NOTIFICATION_EMAIL_SENDER_ADDRESS,IMPORT_MEDIA_STORAGE_SRC"
USER 
"espacil8"
proxy-nokeepalive 
"1"