search

amjadafanah / FX-SAAS-9

This project is for testing the security and quality of APIs in FX SaaS
0 stars 0 forks source link

FX-SAAS-9 : ApiV1DashboardCountBytesGetPathParamSqlInjectionMysqlPagesize #1332

Open amjadafanah opened 6 years ago

amjadafanah commented 6 years ago

Project : FX-SAAS-9

Job : Dev

Env : Dev

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 200

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 04 Oct 2018 11:09:32 GMT]}

Endpoint : http://13.56.210.25/api/v1/dashboard/count-bytes?pageSize=

Request :

Response :
{ "requestId" : "None", "requestTime" : "2018-10-04T11:09:33.452+0000", "errors" : true, "messages" : [ ], "data" : null, "totalPages" : 0, "totalElements" : 0 }

Logs :
Assertion [@ResponseTime >= 5000] resolved-to [20 >= 5000] result [Failed] --- FX Bot ---

amjadafanah commented 6 years ago

Project : FX-SAAS-9

Job : Dev

Env : Dev

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 200

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Fri, 05 Oct 2018 11:20:48 GMT]}

Endpoint : http://13.56.210.25/api/v1/dashboard/count-bytes?pageSize=

Request :

Response :
{ "requestId" : "None", "requestTime" : "2018-10-05T11:20:48.581+0000", "errors" : false, "messages" : [ ], "data" : 813670, "totalPages" : 0, "totalElements" : 0 }

Logs :
Assertion [@ResponseTime >= 5000] resolved-to [2217 >= 5000] result [Failed] --- FX Bot ---