误报提交入口

宝塔用户_jlqvja 发表于 2025-4-27 11:13
SQL注入错误拦截

防火墙9.6.6 或者9.6.7 是修复的状态

这个IP是我另外一个服务器

这个IP是我另外一个服务器

这是正常的请求

这个是正常的提交

文件名中带有(Z-Library)这几个字符的都会被拦截，但是，只要把()括号删除，就不会被拦截，正常的文件名。

正常参数误报

宝塔用户_rdbofb 发表于 2025-6-10 00:30
文件名中带有(Z-Library)这几个字符的都会被拦截，但是，只要把()括号删除，就不会被拦截，正常的文件名。 ...

这个防火墙更新到9.6.9 就已经修复了。

姚志浩 发表于 2025-6-16 09:11
正常参数误报

这个更新到防火墙的9.6.9 也修复了

错误拦截

图片已上传附件

错误拦截GET /school/2146.html HTTP/1.1
accept-language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
cookie: visitor_type=old; 53gid2=13469238433000; 53revisit=1748398901595; Hm_lvt_94491b75df7235f701d1b2ff384e9e53=1749173683; Hm_lvt_e7df014a871a415bbbc08162fe7f275e=1748398901,1749028347,1749607137,1750130144; HMACCOUNT=28D7D3B1295C7A2F; 53kf_72082329_from_host=www.k12zx.com; uuid_53kf_72082329=84d05cffe6d73a464d70a1d6a0004ee9; 53kf_72082329_land_page=https%253A%252F%252Fwww.xxxx.com%252Fis%252F; kf_72082329_land_page_ok=1; 53kf_72082329_keyword=https%3A%2F%2Fwww.xxxx.com%2Fis%2F; visitor_type=old; 53uvid=1; onliner_zdfq72082329=0; invite_53kf_totalnum_5=5; my_acc_reauto_time=1750131076759; Hm_lvt_1a08801e3846da01a24a9ea7f219664a=1749173683,1750143406; Hm_lpvt_e7df014a871a415bbbc08162fe7f275e=1750757477; isx_session=ec1e458666792d29b69f68413c10368b9a8fdaad; Hm_lpvt_1a08801e3846da01a24a9ea7f219664a=1750816801; 3b37c977091fec34d20281d27f0c213c=e1f88c8f2d33fa45634ceedce8493851
priority: u=0, i
sec-ch-ua-platform: "Windows"
accept-encoding: gzip, deflate, br, zstd
sec-fetch-site: same-origin
referer: https://www.xxxx.com/school/2146.html
host: www.xxxx.com
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
sec-ch-ua: "Microsoft Edge";v="137", "Chromium";v="137", "Not/A)Brand";v="24"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 Edg/137.0.0.0