服务器端请求伪造

error/data/prvd/src/sink/ssrf/001-curl_exec.php in curl_execphp

DEDECMS-R

解决

忽略

链接问题跟踪器

172.17.0.1

ID: 7cmrl5osvgfpv21l4dvc549qin

Unknown Browser

php

版本： 7.2.9

消息

服务器端请求伪造

Stacktrace(最近的调用最先显示)

全部原始数据

/data/prvd/src/sink/ssrf/001-curl_exec.php in curl_exec at line 7
3. function curl_exec($ch) {
4. // $url 并没有被 mark 上
5. $url = curl_getinfo($ch, CURLINFO_EFFECTIVE_URL);
6. prvd_check_ssrf($url, prvd_translate("Server Side Request Forgery"));
7. return call_user_func(PRVD_RENAME_PREFIX."curl_exec", $ch);
8. }
/var/www/html/include/dedehttpdown.class.php in PrivateStartSession at line 363
1. }
3. curl_setopt($this->m_ch, CURLOPT_CONNECTTIMEOUT, 20);
4. curl_setopt($this->m_ch, CURLOPT_TIMEOUT, 900);
6. $this->m_html = curl_exec($this->m_ch);
7. $status = curl_getinfo($this->m_ch);
8. if (count($status) > 0) {
9. foreach ($status as $key => $value) {
10. $key = str_replace("_", "-", $key);
11. if ($key == "http-code") {
/var/www/html/include/dedehttpdown.class.php in OpenUrl at line 128
1. $this->reTry = 0;
2. $this->Close();
4. //初始化系统
5. $this->PrivateInit($url);
6. $this->PrivateStartSession($requestType);
7. }
9. /**
10. * 转到303重定向网址
11. *
inc/inc_coonepage.php in CoOnePage at line 39
1. {
2. $redatas['source'] = $row['title'];
3. }
4. }
5. $htd = new DedeHttpDown();
6. $htd->OpenUrl($gurl);
7. $body = $htd->GetHtml();
8. if($body!='')
9. {
10. //编码自动转换
11. if($cfg_soft_lang=='utf-8')
article_add.php at line 28
2. //采集单个网页
3. if(preg_match("#^http:\/\/#", $geturl))
4. {
5. require_once(DEDEADMIN."/inc/inc_coonepage.php");
6. $redatas = CoOnePage($geturl);
7. extract($redatas);
8. }
10. //获得频道模型ID
11. if($cid>0 && $channelid==0)

Breadcrumbs

21:36:53

error_reporting	`mysqli_query() expects parameter 1 to be mysqli, string given`
line	6
code	2
file	/data/prvd/src/sink/sqli/001-mysqli_query.php

21:36:53

error_reporting	`Undefined offset: 1`
line	114
code	8
file	/var/www/html/include/dedesqli.class.php

21:36:53

error_reporting	`Undefined variable: ch`
line	612
code	8
file	/var/www/html/include/dedehttpdown.class.php

21:36:53

error_reporting	`curl_close() expects parameter 1 to be resource, null given`
line	612
code	2
file	/var/www/html/include/dedehttpdown.class.php

21:36:53

error_reporting	`fclose() expects parameter 1 to be resource, string given`
line	614
code	2
file	/var/www/html/include/dedehttpdown.class.php

21:36:53
message
服务器端请求伪造

Formatted curl

GET/dede/article_add.phplocalhost

查询字符串

Submit3	抓取
channelid	1
cid	0
geturl	http://www.baidu.com'"><xtanzi>./../xtanzi

Cookies

DedeLoginTime	1541766503
DedeLoginTime__ckMd5	be38df79a9298232
DedeUserID	1
DedeUserID__ckMd5	5ebcf2784562fcbb
PHPSESSID	********
_csrf_name_36da6296	d769aa52e6fd810e6969605155173d8d
_csrf_name_36da6296__ckMd5	fd74c8a16f6cf59f
menuitems	1_1,2_1,3_1,4_1,5_1

标头

Accept	text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8
Accept-Encoding	gzip, deflate, br
Accept-Language	zh-CN,zh;q=0.9,en;q=0.8
Connection	keep-alive
Host	localhost:8080
Prvd-Fuzzer	halo_from_fate0
Referer	http://localhost:8080/dede/article_add.php
Upgrade-Insecure-Requests	1
User-Agent	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36

User

Runtime

Name	php
Version	7.2.9

SDK

姓名	sentry-php
版本	1.9.2

Ownership Rules

Create Ownership Rule

All Environments

首次出现时间

时间:: 3 minutes ago
Nov 9, 2018 9:36:53 PM HKT
版本:: not configured

最后出现时间

时间:: 3 minutes ago
Nov 9, 2018 9:36:53 PM HKT
版本:: not configured

通知

由于已订阅工作流通知你正在接受该项目的更新。

bigfile_info	[]
dede_admin_channel	0
dede_admin_id	1
dede_admin_name	admin
dede_admin_purview	admin_AllowAll
dede_admin_style	newdedecms
dede_admin_type	10
file_info	[]
securimage_code_value	2h9o
token	878d78d1285914e1d5dfa077694de322

dedecms

服务器端请求伪造

问题 #

事件

用户

Assignee

172.17.0.1

Unknown Browser

php

标签

消息

Stacktrace(最近的调用最先显示)

GET/dede/article_add.phplocalhost

查询字符串

Cookies

标头

User

Runtime

SDK

Ownership Rules

All Environments

最近 24 小时

最近 30 天

首次出现时间

最后出现时间

标签

通知

dedecms

服务器端请求伪造

问题 #

事件

用户

Assignee

事件 db1aa522fb4f425ca0dbf2256b033f61

172.17.0.1

Unknown Browser

php

标签

消息

Stacktrace(最近的调用最先显示)

Breadcrumbs

GET/dede/article_add.phplocalhost

查询字符串

Cookies

标头

User

Runtime

SDK

Ownership Rules

All Environments

最近 24 小时

最近 30 天

首次出现时间

最后出现时间

标签

通知