https://api.dev.talloverde.com/api/exec?q=%2Fapi%2Fexec

Forwarded to
ErrorController (c0e595)
Method
POST
HTTP Status
404
IP
144.126.130.1
Profiled on
Token
da9c76

n/a

Request

GET Parameters

Key Value
q 
"/api/exec"

POST Parameters

Key Value
cmd 
"echo RCE_TEST_2112"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_remove_csp_headers 
true
_stopwatch_token 
"981519"

Request Headers

Header Value
accept 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8"
accept-encoding 
"gzip, deflate, br, zstd"
accept-language 
"en-GB,en;q=0.9"
cf-connecting-ip 
"204.57.210.96"
cf-ipcountry 
"AU"
cf-ray 
"248967-LAX39"
cf-request-id 
"8458121962760843"
cf-visitor 
"{"scheme":"https"}"
connection 
"keep-alive"
content-length 
"22"
content-type 
"application/x-www-form-urlencoded"
host 
"api.dev.talloverde.com"
sec-ch-ua 
""Not_A Brand";v="8", "Chromium";v="120""
sec-ch-ua-mobile 
"?0"
sec-ch-ua-platform 
""Linux""
sec-fetch-dest 
"frame"
sec-fetch-mode 
"no-cors"
sec-fetch-site 
"same-origin"
sec-fetch-user 
"?1"
true-client-ip 
"204.57.210.96"
upgrade-insecure-requests 
"1"
user-agent 
"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
x-admin-request 
"false"
x-amzn-trace-id 
"Root=1-97390875-861842568772236"
x-api-key 
""
x-bypass-middleware 
"true"
x-bypass-rate-limit 
"1"
x-client-ip 
"204.57.210.96"
x-client-ip-via 
"204.57.210.96"
x-cluster-client-ip 
"204.57.210.96"
x-forwarded-for 
"131.217.6.8, 251.209.155.177, 204.57.210.96"
x-forwarded-for-last 
"251.209.155.177"
x-forwarded-for-original 
"204.57.210.96"
x-forwarded-port 
"443"
x-forwarded-proto 
"https"
x-forwarded-scheme 
"https"
x-forwarded-ssl 
"on"
x-middleware-request 
"true"
x-middleware-skip 
"1"
x-nextjs-data 
"1"
x-nextjs-version 
"14.0.0"
x-original-url 
""
x-php-ob-level 
"1"
x-proxyuser-ip 
"204.57.210.96"
x-real-ip 
"204.57.210.96"
x-skip-auth 
"1"
x-vercel-id 
"9342640499"
x-vercel-protection-bypass 
"1"

Request Content

Raw

cmd=echo+RCE_TEST_2112

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Fri, 26 Dec 2025 07:36:53 GMT"
x-debug-exception 
"No%20route%20found%20for%20%22POST%20https%3A%2F%2Fapi.dev.talloverde.com%2Fapi%2Fexec%22"
x-debug-exception-file 
"%2Ftallo%2Ftallo-api%2Fvendor%2Fsymfony%2Fhttp-kernel%2FEventListener%2FRouterListener.php:130"
x-debug-token 
"da9c76"
x-debug-token-link 
"https://api.dev.talloverde.com/_profiler/c0e595"
x-previous-debug-token 
"c0e595"
x-robots-tag 
"noindex"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_SECRET 
"1a864761e9f9ac727e352004b5179394"
JWT_PUBLIC_KEY 
"%kernel.project_dir%/config/jwt/public.pem"
JWT_SECRET_KEY 
"%kernel.project_dir%/config/jwt/private.pem"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_ENV 
"dev"
AWS_EXECUTION_ENV 
"AWS_ECS_EC2"
COMPOSER_ALLOW_SUPERUSER 
"1"
CONTENT_LENGTH 
"22"
CONTENT_TYPE 
"application/x-www-form-urlencoded"
DATABASE_URL 
"mysql://tallo:tallodev@tallo-dev-db.crb70vi0tvob.us-east-1.rds.amazonaws.com:3306/tallo5"
DOCUMENT_ROOT 
"/tallo/tallo-api/public"
DOCUMENT_URI 
"/index.php"
ECS_AGENT_URI 
"http://169.254.170.2/api/33fe397a-4c28-4407-98e5-d895bd211b68"
ECS_CONTAINER_METADATA_URI 
"http://169.254.170.2/v3/33fe397a-4c28-4407-98e5-d895bd211b68"
ECS_CONTAINER_METADATA_URI_V4 
"http://169.254.170.2/v4/33fe397a-4c28-4407-98e5-d895bd211b68"
FCGI_ROLE 
"RESPONDER"
FINNEGANS_CLIENT_ID 
"4f6e5ccaed2cbcb44c18da4ec9ee620e"
FINNEGANS_CLIENT_SECRET 
"39c31fe75cabd6a8a8eac3be089d01da"
FINNEGANS_COMPANY_CODE 
"Prueba32"
FINNEGANS_DSN 
"https://api.teamplace.finneg.com"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/"
HOSTNAME 
"a270b2f31203"
HTTPS 
"on"
HTTP_ACCEPT 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8"
HTTP_ACCEPT_ENCODING 
"gzip, deflate, br, zstd"
HTTP_ACCEPT_LANGUAGE 
"en-GB,en;q=0.9"
HTTP_CF_CONNECTING_IP 
"204.57.210.96"
HTTP_CF_IPCOUNTRY 
"AU"
HTTP_CF_RAY 
"248967-LAX39"
HTTP_CF_REQUEST_ID 
"8458121962760843"
HTTP_CF_VISITOR 
"{"scheme":"https"}"
HTTP_CONNECTION 
"keep-alive"
HTTP_CONTENT_LENGTH 
"22"
HTTP_CONTENT_TYPE 
"application/x-www-form-urlencoded"
HTTP_HOST 
"api.dev.talloverde.com"
HTTP_SEC_CH_UA 
""Not_A Brand";v="8", "Chromium";v="120""
HTTP_SEC_CH_UA_MOBILE 
"?0"
HTTP_SEC_CH_UA_PLATFORM 
""Linux""
HTTP_SEC_FETCH_DEST 
"frame"
HTTP_SEC_FETCH_MODE 
"no-cors"
HTTP_SEC_FETCH_SITE 
"same-origin"
HTTP_SEC_FETCH_USER 
"?1"
HTTP_TRUE_CLIENT_IP 
"204.57.210.96"
HTTP_UPGRADE_INSECURE_REQUESTS 
"1"
HTTP_USER_AGENT 
"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
HTTP_X_ADMIN_REQUEST 
"false"
HTTP_X_AMZN_TRACE_ID 
"Root=1-97390875-861842568772236"
HTTP_X_API_KEY 
""
HTTP_X_BYPASS_MIDDLEWARE 
"true"
HTTP_X_BYPASS_RATE_LIMIT 
"1"
HTTP_X_CLIENT_IP 
"204.57.210.96"
HTTP_X_CLIENT_IP_VIA 
"204.57.210.96"
HTTP_X_CLUSTER_CLIENT_IP 
"204.57.210.96"
HTTP_X_FORWARDED_FOR 
"131.217.6.8, 251.209.155.177, 204.57.210.96"
HTTP_X_FORWARDED_FOR_LAST 
"251.209.155.177"
HTTP_X_FORWARDED_FOR_ORIGINAL 
"204.57.210.96"
HTTP_X_FORWARDED_PORT 
"443"
HTTP_X_FORWARDED_PROTO 
"https"
HTTP_X_FORWARDED_SCHEME 
"https"
HTTP_X_FORWARDED_SSL 
"on"
HTTP_X_MIDDLEWARE_REQUEST 
"true"
HTTP_X_MIDDLEWARE_SKIP 
"1"
HTTP_X_NEXTJS_DATA 
"1"
HTTP_X_NEXTJS_VERSION 
"14.0.0"
HTTP_X_ORIGINAL_URL 
""
HTTP_X_PROXYUSER_IP 
"204.57.210.96"
HTTP_X_REAL_IP 
"204.57.210.96"
HTTP_X_SKIP_AUTH 
"1"
HTTP_X_VERCEL_ID 
"9342640499"
HTTP_X_VERCEL_PROTECTION_BYPASS 
"1"
JWT_PASSPHRASE 
"t4ll0v3rd3"
MAILER_URL 
"smtp://AKIAVUD3L33S5VVIS54F:BMoI%2BGV%2FwJfhd9WiKcdZWtTB1VfAOiPPn8PPGhnMqIX8@email-smtp.us-west-2.amazonaws.com:587"
MESSENGER_TRANSPORT_DSN 
"doctrine://default"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHP_SELF 
"/index.php"
PWD 
"/tallo/tallo-api"
QUERY_STRING 
"q=/api/exec&"
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"144.126.130.1"
REMOTE_PORT 
"58016"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1766734613
REQUEST_TIME_FLOAT 
1766734613.5367
REQUEST_URI 
"/api/exec"
SCRIPT_FILENAME 
"/tallo/tallo-api/public/index.php"
SCRIPT_NAME 
"/index.php"
SENTRY_DSN 
"https://1f698cb3bd4449f58ffd5c6f55cea9f0@sentry.io/2239805"
SERVER_ADDR 
"172.17.0.3"
SERVER_NAME 
"_"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"nginx/1.18.0"
SHLVL 
"1"
SUPERVISOR_ENABLED 
"1"
SUPERVISOR_GROUP_NAME 
"php-fpm"
SUPERVISOR_PROCESS_NAME 
"php-fpm"
SYMFONY_DOTENV_VARS 
"APP_SECRET,JWT_SECRET_KEY,JWT_PUBLIC_KEY"
TALLO_AFIP_CERT_CUIT 
"20215288251"
TALLO_AFIP_CERT_PASSPHRASE 
""
TALLO_AFIP_CERT_PRIVATE 
"config/afip/certs/dev/tallo-afip-private.key"
TALLO_AFIP_CERT_PUBLIC 
"config/afip/certs/dev/tallo-afip-public.pem"
TALLO_AFIP_WSAA_URL 
"https://wsaahomo.afip.gov.ar/ws/services/LoginCms"
TALLO_AFIP_WSFE_URL 
"https://wswhomo.afip.gov.ar/wsfev1/service.asmx"
TALLO_AWS_S3_BUCKET_IMAGES 
"tallo5-dev-images"
TALLO_CORS_ALLOW 
"https://admin.dev.talloverde.com,https://dev.talloverde.com,http://localhost:3000,http://localhost:8080,https://main.d3twsenef6dihz.amplifyapp.com"
TALLO_MERCADOPAGO_PRIVATE_KEY 
"TEST-5832255644382323-090421-c3d3bef2ea13798916f1e1532943be38-818937118"
TALLO_VROOM_HOST 
"vroom.services.dev.talloverde.com"
TALLO_WEB_LOGIN_URL 
"https://dev.talloverde.com/login"
TALLO_WEB_PASSWORD_RESET_URL 
"https://dev.talloverde.com/forgot"
TURNSTILE_SECRET_KEY 
"0x4AAAAAACHqrH5J6RVnxBIz40VCGUdWiwA"
TURNSTILE_SITE_KEY 
"0x4AAAAAACHqrHxKu5X4Rv0P"
USER 
"nobody"
WKHTMLTOIMAGE_PATH 
"/usr/bin/wkhtmltoimage"
WKHTMLTOPDF_PATH 
"/usr/bin/wkhtmltopdf"

Sub Requests 1

ErrorController (token = c0e595)

Key Value
_controller 
"error_controller"
_stopwatch_token 
"d5316f"
exception 
Symfony\Component\HttpKernel\Exception\NotFoundHttpException {#74
  -statusCode: 404
  -headers: []
  #message: "No route found for "POST https://api.dev.talloverde.com/api/exec""
  #code: 0
  #file: "/tallo/tallo-api/vendor/symfony/http-kernel/EventListener/RouterListener.php"
  #line: 130
  -previous: Symfony\Component\Routing\Exception\ResourceNotFoundException {#154 …}
  trace: {
    /tallo/tallo-api/vendor/symfony/http-kernel/EventListener/RouterListener.php:130 {
      Symfony\Component\HttpKernel\EventListener\RouterListener->onKernelRequest(RequestEvent $event) …
      › 
      ›     throw new NotFoundHttpException($message, $e);
      › } catch (MethodNotAllowedException $e) {
    }
    /tallo/tallo-api/vendor/symfony/event-dispatcher/Debug/WrappedListener.php:111 {
      Symfony\Component\EventDispatcher\Debug\WrappedListener->__invoke(object $event, string $eventName, EventDispatcherInterface $dispatcher): void …
      › 
      › ($this->optimizedListener ?? $this->listener)($event, $eventName, $dispatcher);
      › 
    }
    /tallo/tallo-api/vendor/symfony/event-dispatcher/EventDispatcher.php:230 {
      Symfony\Component\EventDispatcher\EventDispatcher->callListeners(iterable $listeners, string $eventName, object $event) …
      ›     }
      ›     $listener($event, $eventName, $this);
      › }
    }
    /tallo/tallo-api/vendor/symfony/event-dispatcher/EventDispatcher.php:59 {
      Symfony\Component\EventDispatcher\EventDispatcher->dispatch(object $event, string $eventName = null): object …
      › if ($listeners) {
      ›     $this->callListeners($listeners, $eventName, $event);
      › }
    }
    /tallo/tallo-api/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php:152 {
      Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher->dispatch(object $event, string $eventName = null): object …
      › try {
      ›     $this->dispatcher->dispatch($event, $eventName);
      › } finally {
    }
    /tallo/tallo-api/vendor/symfony/http-kernel/HttpKernel.php:128 {
      Symfony\Component\HttpKernel\HttpKernel->handleRaw(Request $request, int $type = self::MAIN_REQUEST): Response …
      › $event = new RequestEvent($this, $request, $type);
      › $this->dispatcher->dispatch($event, KernelEvents::REQUEST);
      › 
    }
    /tallo/tallo-api/vendor/symfony/http-kernel/HttpKernel.php:74 {
      Symfony\Component\HttpKernel\HttpKernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true): Response …
      › try {
      ›     return $this->handleRaw($request, $type);
      › } catch (\Exception $e) {
    }
    /tallo/tallo-api/vendor/symfony/http-kernel/Kernel.php:202 {
      Symfony\Component\HttpKernel\Kernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true): Response …
      › try {
      ›     return $this->getHttpKernel()->handle($request, $type, $catch);
      › } finally {
    }
    /tallo/tallo-api/public/index.php:20 {
      › $request = Request::createFromGlobals();
      › $response = $kernel->handle($request);
      › $response->send();
    }
  }
}
logger 
Symfony\Bridge\Monolog\Logger {#318 …6}