误报提交入口

你好，误报请解除

tyjade 发表于 2025-10-14 11:02
你好，误报请解除

这个你更新到最新版9.8.1 智能CC已经优化过了

皮卡超人 发表于 2025-10-7 15:25
估计这个是因为横杠的原因，误报为sql注入了。是正常请求

这个已经修复了。如果你的版本是9.8.1 就修复一下。如果不是话就升级到9.8.1

scrollll 发表于 2025-10-3 13:03
这个密码没什么问题吧

这个你需要更新一下防火墙的版本。新版本是已经修复了这个问题

误报

误报

GET /api/collections/certificate/records?page=1&perPage=20&expand=workflowRef&fields=id%2Csource%2CsubjectAltNames%2CserialNumber%2CissuerOrg%2CkeyAlgorithm%2CvalidityNotBefore%2CvalidityNotAfter%2CvalidityInterval%2CisRenewed%2CisRevoked%2CworkflowRef%2Ccreated%2Cupdated%2Cdeleted%2Cexpand.workflowRef.id%2Cexpand.workflowRef.name%2Cexpand.workflowRef.description&filter=deleted%3Dnull%20%26%26%20validityNotAfter%3C%3D%272025-11-24%2008%3A27%3A52.566Z%27%20%26%26%20validityNotAfter%3E%40now%20%26%26%20isRevoked%3D0&sort=-created HTTP/1.1
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
via: cn8360.l1, l2et2-2.l2
ali-cdn-real-ip: 27.19.xx.xx
eagleeye-traceid: ab2ba99917631089067731950e
ali-swift-stat-host: xx.xx.com
ali-cdn-real-port: 11157
ali-swift-force-ttl-code: 400=0
host: xx.xx.com
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: zh-CN,zh;q=0.9
sec-ch-ua: "Chromium";v="142", "Google Chrome";v="142", "Not_A Brand";v="99"
sec-ch-ua-mobile: ?0
x-alicdn-da-via: 171.43.xx.xx,101.132.xx.xx
ali-cdn-appview-name: cdn-tengine
dnt: 1
x-client-scheme: https
sec-fetch-site: cross-site
ali-swift-log-host: xx.xx.com
sec-fetch-mode: navigate
sec-ch-ua-platform: "macOS"
sec-fetch-dest: document
sec-fetch-user: ?1
x-forwarded-for: 27.19.xx.xx
upgrade-insecure-requests: 1
cookie: SITE_TOTAL_ID=xxxx; server_name_session=xxxx
priority: u=0, i
waf-intercept-client-ip-port: 27.19.xx.xx:

误报，用户正常提交数据

误报，用户正常提交数据

误报提交：

POST /wp-json/wp/v2/pages/6066?_locale=user HTTP/1.1
x-wp-nonce: 8f9a07d7d6
cf-ipcountry: CN
origin: https://himorlift.com
accept: application/json, */*;q=0.1
content-type: application/json
host: himorlift.com
accept-language: zh-CN,zh;q=0.9
cf-connecting-ip: 2408:8214:210:f4d1:d91a:a38:d3c2:95f9
sec-fetch-mode: cors
x-forwarded-for: 2408:8214:210:f4d1:d91a:a38:d3c2:95f9
cookie: cht_country_code=JP; hide-bg-blur-effect=true; isReturningVisitor1525=true; isReturningVisitor4662=true; SITE_TOTAL_ID=fc94243d2fbd26c560e0fb710ee69725; X_CACHE_KEY=41c6ab9fc5857bdd42a454479f6036a3; wp-settings-1=libraryContent%3Dbrowse%26ampamp%3Dundefined%26ampeditor%3Dtinymce%26ampimgsize%3Dfull%26imgsize%3Dfull%26editor%3Dtinymce%26mfold%3Do%26hidetb%3D0%26posts_list_mode%3Dlist; server_name_session=3f26a832d312e2c873495f84454fa2c2; wp-settings-time-1=1764058526; wordpress_test_cookie=WP%20Cookie%20check; cf_clearance=GrupP2D4sqJXV2dbluSiANwtUwxmYSaelWFBXk83Dwc-1764116121-1.2.1.1-tgEPohibdum.tWQOjX10awtSNnsDGEl3Rhe1aQ1R2F0qvoaOzvGeO6KcFaeV8dd8fdylDxIAz13cB1x7fJuZQDBGzTIdI62Pfu.ErOldfOz5a8GgNlxxP3eT5Y21h2gvRf11.iCeHEVMotJLQp2SjuLxSU2OxYSSTDCPa4uXD_ATqYghts5VYBtGz7OC6p1yiqxhzQtR.n1BpAN5DZ3VJ4uuQqX.K5viletyJe70daI; wordpress_logged_in_c0268077300bedf5733a085dd1d54bc1=qimolift%7C1764288933%7CPCFHqzwF1frH1OahVwplOjJGKpBem6Gcqr3N3flO15e%7C893084a0e137d956f325953d61042d5e1ab6eb30ad50b2903b91e5f066154dfd
priority: u=1, i
cf-visitor: {"scheme":"https"}
sec-ch-ua: "Chromium";v="142", "Google Chrome";v="142", "Not_A Brand";v="99"
sec-fetch-dest: empty
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
cdn-loop: cloudflare; loops=1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
content-length: 31804
x-forwarded-proto: https
sec-fetch-site: same-origin
accept-encoding: gzip, br
x-http-method-override: PUT
referer: https://himorlift.com/wp-admin/post.php?post=6066&action=edit
cf-ray: 9a4531e468bb28f3-LAX
waf-intercept-client-ip-port: 172.69.34.220:10936