Simple Linux Panel
This report summarizes scanner evidence for midoks/mdserver-web, a Python project with 4,516 GitHub stars. SynthScan examined 233,791 lines of code across 1180 source files, recording 2179 pattern matches distributed across 15 syntactic categories. The legacy adjusted pattern signal is 18.2 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 360 finding(s).
Are imports declared and package/API names verified? 824 finding(s).
Are wrappers, guards, and repeated structures necessary? 1051 finding(s).
Which changes need focused human review? 2179 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2179 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | panel_task.py | 3 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_task.py | 5 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_task.py | 7 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_task.py | 9 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_task.py | 11 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_task.py | 13 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_tools.py | 3 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_tools.py | 5 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_tools.py | 7 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_tools.py | 9 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_tools.py | 11 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | panel_tools.py | 13 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/mariadb/scripts/backup.py | 2 | #----------------------------- | COMMENT |
| MEDIUM | plugins/mariadb/scripts/backup.py | 4 | #----------------------------- | COMMENT |
| MEDIUM | plugins/gdrive/class/gdriveclient.py | 24 | # ----------------------------- | COMMENT |
| MEDIUM | plugins/mongodb/scripts/backup.py | 2 | #----------------------------- | COMMENT |
| MEDIUM | plugins/mongodb/scripts/backup.py | 4 | #----------------------------- | COMMENT |
| MEDIUM | plugins/mysql-community/scripts/backup.py | 2 | #----------------------------- | COMMENT |
| MEDIUM | plugins/mysql-community/scripts/backup.py | 4 | #----------------------------- | COMMENT |
| MEDIUM | …gins/cryptocurrency_trade/ccxt/strategy/online_test.py | 45 | # --------------------------- | COMMENT |
| MEDIUM | plugins/cryptocurrency_trade/ccxt/strategy/on_g_test.py | 50 | # --------------------------- | COMMENT |
| MEDIUM⚡ | web/config.py | 3 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/config.py | 5 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/config.py | 7 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/config.py | 9 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/config.py | 11 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/config.py | 13 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/version.py | 1 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/version.py | 3 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/version.py | 5 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/version.py | 7 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/version.py | 9 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/version.py | 11 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/branding.py | 1 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/branding.py | 3 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/branding.py | 5 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/branding.py | 7 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/branding.py | 9 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/branding.py | 11 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/setting.py | 3 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/setting.py | 5 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/setting.py | 7 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/setting.py | 9 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/setting.py | 11 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/setting.py | 13 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/app.py | 3 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/app.py | 5 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/app.py | 7 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/app.py | 9 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | web/misc/test/api/mw_api.py | 10 | #------------------------------ | COMMENT |
| MEDIUM | web/misc/test/api/mw_api.py | 12 | #------------------------------ | COMMENT |
| MEDIUM⚡ | web/core/db.py | 3 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/core/db.py | 5 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/core/db.py | 7 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/core/db.py | 9 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/core/db.py | 11 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | web/core/db.py | 13 | # --------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | web/core/db.py | 29 | #------------------------------ | COMMENT |
| MEDIUM | web/core/db.py | 31 | #------------------------------ | COMMENT |
| MEDIUM⚡ | web/core/mw.py | 3 | # --------------------------------------------------------------------------------- | COMMENT |
| 384 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | panel_task.py | 20 | CODE | |
| LOW | panel_tools.py | 19 | CODE | |
| LOW | plugins/imail/index.py | 4 | CODE | |
| LOW | plugins/imail/index.py | 6 | CODE | |
| LOW | plugins/imail/index.py | 7 | CODE | |
| LOW | plugins/imail/index.py | 8 | CODE | |
| LOW | plugins/imail/index.py | 9 | CODE | |
| LOW | plugins/imail/index.py | 11 | CODE | |
| LOW | plugins/imail/index.py | 55 | CODE | |
| LOW | plugins/gorse/index.py | 4 | CODE | |
| LOW | plugins/gorse/index.py | 6 | CODE | |
| LOW | plugins/mosquitto/index.py | 4 | CODE | |
| LOW | plugins/mosquitto/index.py | 6 | CODE | |
| LOW | plugins/mosquitto/index.py | 7 | CODE | |
| LOW | plugins/webhook/index.py | 4 | CODE | |
| LOW | plugins/webhook/webhook_index.py | 4 | CODE | |
| LOW | plugins/cloudreve/index.py | 4 | CODE | |
| LOW | plugins/cloudreve/index.py | 6 | CODE | |
| LOW | plugins/postgresql/index.py | 4 | CODE | |
| LOW | plugins/postgresql/index.py | 1246 | CODE | |
| LOW | plugins/postgresql/class/pg.py | 3 | CODE | |
| LOW | plugins/postgresql/class/pg.py | 15 | CODE | |
| LOW | plugins/loki/index.py | 4 | CODE | |
| LOW | plugins/loki/index.py | 6 | CODE | |
| LOW | plugins/system_safe/system_safe.py | 4 | CODE | |
| LOW | plugins/rsyncd/tool_task.py | 4 | CODE | |
| LOW | plugins/rsyncd/tool_task.py | 6 | CODE | |
| LOW | plugins/rsyncd/index.py | 3 | CODE | |
| LOW | plugins/rsyncd/index.py | 4 | CODE | |
| LOW | plugins/rsyncd/index.py | 122 | CODE | |
| LOW | plugins/alist/index.py | 4 | CODE | |
| LOW | plugins/alist/index.py | 7 | CODE | |
| LOW | plugins/docker/index.py | 4 | CODE | |
| LOW | plugins/docker/index.py | 611 | CODE | |
| LOW | plugins/acme_pandominassl_apply/index.py | 4 | CODE | |
| LOW | plugins/acme_pandominassl_apply/tool_cron.py | 4 | CODE | |
| LOW | plugins/acme_pandominassl_apply/tool_cron.py | 6 | CODE | |
| LOW | plugins/acme_pandominassl_apply/hooks/goedge.py | 4 | CODE | |
| LOW | plugins/acme_pandominassl_apply/hooks/goedge.py | 7 | CODE | |
| LOW | plugins/acme_pandominassl_apply/hooks/goedge.py | 9 | CODE | |
| LOW | plugins/acme_pandominassl_apply/hooks/init.py | 4 | CODE | |
| LOW | plugins/acme_pandominassl_apply/hooks/init.py | 5 | CODE | |
| LOW | plugins/acme_pandominassl_apply/hooks/init.py | 6 | CODE | |
| LOW | plugins/acme_pandominassl_apply/hooks/init.py | 7 | CODE | |
| LOW | plugins/pureftp/index.py | 4 | CODE | |
| LOW | plugins/pureftp/index.py | 89 | CODE | |
| LOW | plugins/doh/index.py | 4 | CODE | |
| LOW | plugins/doh/index.py | 7 | CODE | |
| LOW | plugins/doh/index.py | 8 | CODE | |
| LOW | plugins/tamper_proof_py/index.py | 4 | CODE | |
| LOW | plugins/tamper_proof_py/index.py | 8 | CODE | |
| LOW | plugins/tamper_proof_py/index.py | 9 | CODE | |
| LOW | plugins/tamper_proof_py/index.py | 10 | CODE | |
| LOW | plugins/mariadb/index.py | 4 | CODE | |
| LOW | plugins/mariadb/index.py | 2243 | CODE | |
| LOW | plugins/mariadb/index.py | 2359 | CODE | |
| LOW | plugins/mariadb/index_mariadb.py | 4 | CODE | |
| LOW | plugins/mariadb/index_mariadb.py | 6 | CODE | |
| LOW | plugins/mariadb/index_mariadb.py | 7 | CODE | |
| LOW | plugins/mariadb/index_mariadb.py | 9 | CODE | |
| 682 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | panel_task.py | 113 | def siteEdateCheck(): | CODE |
| MEDIUM | panel_task.py | 129 | def startPanelTask(): | CODE |
| MEDIUM | panel_task.py | 170 | def check502Task(): | CODE |
| MEDIUM | panel_task.py | 278 | def openrestyAutoRestart(): | CODE |
| LOW | panel_task.py | 68 | except Exception as e: | CODE |
| LOW | panel_task.py | 109 | except Exception as e: | CODE |
| LOW | panel_task.py | 125 | except Exception as e: | CODE |
| LOW | panel_task.py | 134 | except Exception as e: | CODE |
| LOW | panel_task.py | 148 | except Exception as ex: | CODE |
| LOW | panel_task.py | 163 | except Exception as ex: | CODE |
| LOW | panel_task.py | 200 | except Exception as e: | CODE |
| LOW | panel_task.py | 248 | except Exception as e: | CODE |
| LOW | panel_task.py | 260 | except Exception as e: | CODE |
| LOW | panel_task.py | 288 | except Exception as e: | CODE |
| LOW | plugins/imail/index.py | 60 | except Exception as e: | CODE |
| LOW | plugins/imail/index.py | 221 | except Exception as e: | CODE |
| LOW | plugins/postgresql/index.py | 349 | except Exception as e: | CODE |
| LOW | plugins/postgresql/index.py | 674 | except Exception as ex: | CODE |
| LOW | plugins/postgresql/index.py | 1478 | except Exception as e: | CODE |
| LOW | plugins/postgresql/class/pg.py | 49 | except Exception as e: | CODE |
| LOW | plugins/postgresql/class/pg.py | 63 | except Exception as e: | CODE |
| LOW | plugins/postgresql/class/pg.py | 75 | except Exception as e: | CODE |
| LOW | plugins/postgresql/class/pg.py | 174 | except Exception as ex: | CODE |
| LOW | plugins/postgresql/class/pg.py | 186 | except Exception as ex: | CODE |
| LOW | plugins/postgresql/class/pg.py | 201 | except Exception as ex: | CODE |
| LOW | plugins/system_safe/system_safe.py | 354 | except Exception as e: | CODE |
| LOW | plugins/system_safe/system_safe.py | 467 | except Exception as e: | CODE |
| LOW | plugins/system_safe/system_safe.py | 495 | except Exception as e: | CODE |
| LOW | plugins/system_safe/system_safe.py | 504 | except Exception as e: | CODE |
| LOW | plugins/system_safe/system_safe.py | 552 | except Exception as e: | CODE |
| LOW | plugins/system_safe/system_safe.py | 567 | except Exception as e: | CODE |
| LOW | plugins/system_safe/system_safe.py | 1144 | except Exception as e: | CODE |
| MEDIUM | plugins/system_safe/system_safe.py | 492 | def bg_start(self): | CODE |
| MEDIUM | plugins/system_safe/system_safe.py | 501 | def bg_stop(self): | CODE |
| MEDIUM | plugins/system_safe/system_safe.py | 542 | def __lock_path(self, info): | CODE |
| MEDIUM | plugins/system_safe/system_safe.py | 556 | def __unlock_path(self, info): | CODE |
| LOW | plugins/rsyncd/index.py | 127 | except Exception as e: | CODE |
| LOW | plugins/rsyncd/index.py | 491 | except Exception as e: | CODE |
| LOW | plugins/rsyncd/index.py | 797 | except Exception as e: | CODE |
| MEDIUM | plugins/rsyncd/index.py | 460 | def delRecBy(name): | CODE |
| LOW | plugins/alist/index.py | 105 | except Exception as e: | CODE |
| LOW | plugins/alist/index.py | 113 | except Exception as e: | CODE |
| MEDIUM | plugins/alist/index.py | 100 | def __release_port(port, ps = '开启端口'): | CODE |
| MEDIUM | plugins/alist/index.py | 108 | def __delete_port(port): | CODE |
| LOW | plugins/docker/index.py | 19 | except Exception as e: | CODE |
| LOW | plugins/docker/index.py | 32 | except Exception as e: | CODE |
| LOW | plugins/docker/index.py | 193 | except Exception as e: | CODE |
| LOW | plugins/docker/index.py | 414 | except Exception as e: | CODE |
| LOW | plugins/docker/index.py | 616 | except Exception as e: | CODE |
| MEDIUM | plugins/docker/index.py | 29 | def getDClient(): | CODE |
| MEDIUM | plugins/docker/index.py | 190 | def conListData(): | CODE |
| MEDIUM | plugins/docker/index.py | 411 | def imageListData(): | CODE |
| LOW | plugins/acme_pandominassl_apply/index.py | 277 | except Exception as ex: | CODE |
| LOW | plugins/acme_pandominassl_apply/index.py | 386 | except Exception as ex: | CODE |
| LOW | plugins/acme_pandominassl_apply/index.py | 438 | except Exception as ex: | CODE |
| LOW | plugins/acme_pandominassl_apply/index.py | 724 | except Exception as e: | CODE |
| LOW | plugins/acme_pandominassl_apply/index.py | 777 | except Exception as e: | CODE |
| LOW | plugins/pureftp/index.py | 94 | except Exception as e: | CODE |
| LOW | plugins/pureftp/index.py | 406 | except Exception as ex: | CODE |
| LOW | plugins/tamper_proof_py/index.py | 628 | except Exception as e: | CODE |
| 413 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | panel_task.py | 47 | except: | CODE |
| HIGH | plugins/docker/index.py | 19 | except Exception as e: | CODE |
| HIGH | plugins/docker/index.py | 214 | except: | CODE |
| HIGH | plugins/acme_pandominassl_apply/tool_cron.py | 52 | except: | CODE |
| HIGH | plugins/tamper_proof_py/index.py | 363 | except: | CODE |
| HIGH | plugins/mariadb/index.py | 1667 | except Exception as e: | CODE |
| HIGH | plugins/task_manager/task_manager_index.py | 114 | except: | CODE |
| HIGH | plugins/task_manager/task_manager_index.py | 666 | except: | CODE |
| HIGH | plugins/task_manager/task_manager_index.py | 1016 | except: | CODE |
| HIGH | plugins/task_manager/task_manager_index.py | 316 | except: | CODE |
| HIGH | plugins/mongodb/index.py | 569 | except Exception as e: | CODE |
| HIGH | plugins/mongodb/index.py | 690 | except Exception as e: | CODE |
| HIGH | plugins/mysql-community/index.py | 45 | except ValueError: | CODE |
| HIGH | plugins/mysql-community/index.py | 52 | except (TypeError, ValueError): | CODE |
| HIGH | plugins/mysql-community/index.py | 1801 | except Exception as e: | CODE |
| HIGH | plugins/webstats/tool_migrate.py | 273 | except: | CODE |
| HIGH | plugins/webstats/bak/tool_migrate.py | 258 | except: | CODE |
| HIGH | plugins/webstats/t/index.py | 64 | except: | CODE |
| HIGH | plugins/mysql/index.py | 2069 | except Exception as e: | CODE |
| HIGH | plugins/msonedrive/class/msodclient.py | 734 | except: | CODE |
| HIGH | plugins/msonedrive/class/msodclient.py | 738 | except: | CODE |
| HIGH | plugins/msonedrive/class/msodclient.py | 729 | except: | CODE |
| HIGH | plugins/tgbot/startup/extend/push_notice_msg.py | 97 | except Exception as e: | CODE |
| HIGH | plugins/tgbot/startup/extend/receive_music163_search.py | 75 | except: | CODE |
| HIGH | plugins/migration_api/index.py | 665 | except Exception as e: | CODE |
| HIGH | plugins/op_waf/t/index.py | 156 | except: | CODE |
| HIGH | plugins/cryptocurrency_trade/index.py | 189 | except Exception as e: | CODE |
| HIGH | plugins/cryptocurrency_trade/ccxt/strategy/common.py | 130 | except Exception as e: | CODE |
| HIGH | plugins/backup_ftp/class/ftp_client.py | 182 | except: | CODE |
| HIGH | web/core/db.py | 461 | except: | CODE |
| HIGH | web/core/db.py | 63 | except Exception as ex: | CODE |
| HIGH | web/core/mw.py | 597 | except Exception: | CODE |
| HIGH | web/core/mw.py | 980 | except: | CODE |
| HIGH | web/core/mw.py | 998 | except ValueError: | CODE |
| HIGH | web/core/mw.py | 1005 | except (TypeError, ValueError): | CODE |
| HIGH | web/core/mw.py | 1545 | except ipaddress.AddressValueError: | CODE |
| HIGH | web/core/mw.py | 1551 | except ipaddress.AddressValueError: | CODE |
| HIGH | web/core/mw.py | 581 | except Exception: | CODE |
| HIGH | web/core/mw.py | 1356 | except: | CODE |
| HIGH | web/core/mw.py | 1775 | except: | CODE |
| HIGH | web/core/mw.py | 1326 | except: | CODE |
| HIGH | web/core/mw.py | 1338 | except: | CODE |
| HIGH | web/core/mw.py | 1396 | except: | CODE |
| HIGH | web/core/mw.py | 1969 | except: | CODE |
| HIGH | web/core/mw.py | 852 | except Exception as e: | CODE |
| HIGH | web/admin/__init__.py | 89 | except Exception as e: | CODE |
| HIGH | web/admin/setup/init_cron.py | 89 | except: | CODE |
| HIGH | web/admin/setup/init_cron.py | 143 | except: | CODE |
| HIGH | web/admin/dashboard/dashboard.py | 70 | except Exception as e: | CODE |
| HIGH | web/utils/file.py | 704 | except Exception as e: | CODE |
| HIGH | web/utils/site.py | 818 | except: | CODE |
| HIGH | web/utils/site.py | 2540 | except: | CODE |
| HIGH | web/utils/site.py | 716 | except: | CODE |
| HIGH | web/utils/site.py | 2576 | except: | CODE |
| HIGH | web/utils/plugin.py | 784 | except: | CODE |
| HIGH | web/utils/php/fcgi_client.py | 102 | except: | CODE |
| HIGH | web/utils/system/stats.py | 89 | except Exception as e: | CODE |
| HIGH | web/utils/ssh/ssh_local.py | 99 | except: | CODE |
| HIGH | web/utils/ssh/ssh_terminal.py | 393 | except: | CODE |
| HIGH | scripts/backup.py | 96 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | plugins/postgresql/index.py | 1432 | data['cmd'] = 'cd /www/server/mdserver-web && python3 plugins/postgresql/index.py do_full_sync' | CODE |
| HIGH | plugins/postgresql/index.py | 1496 | cmd = 'cd /www/server/mdserver-web && python3 plugins/postgresql/index.py get_master_rep_slave_user_cmd {"username": | CODE |
| HIGH | plugins/acme_pandominassl_apply/tool_cron.py | 94 | cmd += 'cd $mw_dir && python3 $script_path/index.py run_hook' + "\n" | STRING |
| HIGH | plugins/mariadb/index.py | 785 | cmd = 'cd ' + mw.getBackupDir() + '/database/mariadb && gzip -d ' + file | CODE |
| HIGH | plugins/mariadb/index.py | 2604 | cmd = 'cd /www/server/mdserver-web && . bin/activate && python3 plugins/mariadb/index.py get_master_rep_slav | CODE |
| HIGH | plugins/mariadb/index.py | 2756 | cmd = 'cd '+mw.getServerDir()+'/mdserver-web && . bin/activate && python3 plugins/mariadb/index.py sync_database_rep | CODE |
| HIGH | plugins/mariadb/index.py | 3065 | cmd = 'cd '+mw.getServerDir()+'/mdserver-web && . bin/activate && python3 plugins/mariadb/index.py do_full_sync {"d | CODE |
| HIGH | plugins/mariadb/index.py | 3250 | cmd = "cd /www/server/mdserver-web && . bin/activate && python3 plugins/mariadb/index.py dump_mysql_data {\"db\":'" | CODE |
| HIGH | plugins/mariadb/index.py | 3273 | cmd = 'cd /www/server/mdserver-web && . bin/activate && python3 plugins/mariadb/index.py get_master_rep_slave_user_c | CODE |
| HIGH | plugins/mariadb/index.py | 3305 | mw.execShell("cd /tmp && gzip -d dump.sql.gz") | CODE |
| HIGH | plugins/openresty/tool_task.py | 80 | cmd += 'cd $mw_dir && bash $script_path/check.sh' + "\n" | STRING |
| HIGH | plugins/swap/index.py | 195 | cmd += ' && mkswap ' + gsdir + '/swapfile && chmod 600 ' + gsdir + '/swapfile' | CODE |
| HIGH | plugins/mongodb/tool_task.py | 80 | cmd += 'cd $mw_dir && bash $script_path/check.sh' + "\n" | STRING |
| HIGH | plugins/mongodb/index.py | 1430 | cmd = 'cd ' + mw.getBackupDir() + '/database && tar -xzvf ' + file + " -C "+file_dir | CODE |
| HIGH | plugins/mongodb/index.py | 468 | cd /www/server/mdserver-web && . bin/activate && python3 /www/server/mdserver-web/plugins/mongodb/index.py run_info | STRING |
| HIGH | plugins/mongodb/index.py | 1454 | cd /www/server/mdserver-web && . bin/activate && python3 /www/server/mdserver-web/plugins/mongodb/index.py test_data | STRING |
| HIGH | plugins/mongodb/index.py | 1473 | cd /www/server/mdserver-web && . bin/activate && python3 /www/server/mdserver-web/plugins/mongodb/index.py test | STRING |
| HIGH | plugins/mysql-community/index.py | 1027 | cmd = 'cd ' + mw.getBackupDir() + '/database && gzip -d ' + file | CODE |
| HIGH | plugins/mysql-community/index.py | 2721 | cmd = 'cd /www/server/mdserver-web && . bin/activate && python3 ' + \ | CODE |
| HIGH | plugins/mysql-community/index.py | 2880 | cmd = 'cd '+mw.getServerDir()+'/mdserver-web && . bin/activate && python3 plugins/mysql-community/index.py sync_data | CODE |
| HIGH | plugins/mysql-community/index.py | 3148 | cmd = 'cd '+mw.getServerDir()+'/mdserver-web && . bin/activate && python3 plugins/mysql-community/index.py do_full_s | CODE |
| HIGH | plugins/mysql-community/index.py | 3404 | cmd = "cd /www/server/mdserver-web && . bin/activate && python3 " + \ | CODE |
| HIGH | plugins/mysql-community/index.py | 3428 | cmd = 'cd /www/server/mdserver-web && . bin/activate && python3 ' + \ | CODE |
| HIGH | plugins/mysql-community/index.py | 3459 | mw.execShell("cd /tmp && gzip -d dump.sql.gz") | CODE |
| HIGH | plugins/webstats/t/index.py | 120 | os.system('cd /Users/midoks/Desktop/mwdev/server/mdserver-web/plugins/webstats && sh install.sh uninstall 0.2.2 && s | CODE |
| HIGH | plugins/webstats/t/index.py | 121 | os.system('cd /Users/midoks/Desktop/mwdev/server/mdserver-web/ && python3 plugins/openresty/index.py stop && python3 | CODE |
| HIGH | plugins/clean/tool_task.py | 83 | cmd += 'cd $mw_dir && python3 $script_path/index.py clean >> $logs_file 2>&1' + "\n" | STRING |
| HIGH | plugins/nezha/tool_task.py | 80 | cmd += 'cd $mw_dir && bash $script_path/update.sh' + "\n" | STRING |
| HIGH | plugins/sphinx/tool_cron.py | 102 | cmd += 'cd $mw_dir && python3 $script_path/index.py update_all' + "\n" | STRING |
| HIGH | plugins/sphinx/tool_cron.py | 151 | cmd += 'cd $mw_dir && python3 $script_path/index.py update_delta' + "\n" | STRING |
| HIGH | plugins/mysql/index.py | 1190 | cmd = 'cd ' + mw.getFatherDir() + '/backup/database && gzip -d ' + file | CODE |
| HIGH | plugins/mysql/index.py | 1241 | cmd = 'cd ' + mw.getFatherDir() + '/backup/database && gzip -d ' + file | CODE |
| HIGH | plugins/mysql/index.py | 3025 | cmd = 'cd /www/server/mdserver-web && . bin/activate && python3 ' + \ | CODE |
| HIGH | plugins/mysql/index.py | 3185 | cmd = 'cd '+mw.getServerDir()+'/mdserver-web && . bin/activate && python3 plugins/mysql/index.py sync_database_repai | CODE |
| HIGH | plugins/mysql/index.py | 3458 | cmd = 'cd '+mw.getServerDir()+'/mdserver-web && . bin/activate && python3 plugins/mysql/index.py do_full_sync {"db" | CODE |
| HIGH | plugins/mysql/index.py | 3749 | cmd = "cd /www/server/mdserver-web && . bin/activate && python3 " + \ | CODE |
| HIGH | plugins/mysql/index.py | 3773 | cmd = 'cd /www/server/mdserver-web && . bin/activate && python3 ' + \ | CODE |
| HIGH | plugins/mysql/index.py | 3804 | mw.execShell("cd /tmp && gzip -d dump.sql.gz") | CODE |
| HIGH | plugins/migration_api/index.py | 101 | exe = "cd {0} && . bin/activate && python3 plugins/migration_api/index.py bg_process &>{1} &".format( | CODE |
| HIGH | plugins/manticoresearch/tool_cron.py | 102 | cmd += 'cd $mw_dir && python3 $script_path/index.py update_all' + "\n" | STRING |
| HIGH | plugins/manticoresearch/tool_cron.py | 151 | cmd += 'cd $mw_dir && python3 $script_path/index.py update_delta' + "\n" | STRING |
| HIGH | plugins/op_waf/tool_task.py | 84 | cmd += 'echo "cd $mw_dir && . bin/activate && python3 $script_path/tool_task.py run >> $logs_file 2>&1"' + "\n" | STRING |
| HIGH | plugins/op_waf/tool_task.py | 85 | cmd += 'cd $mw_dir && . bin/activate && python3 $script_path/tool_task.py run >> $logs_file 2>&1' + "\n" | STRING |
| HIGH | plugins/op_waf/index.py | 4 | cd /Users/midoks/Desktop/mwdev/server/mdserver-web/plugins/op_waf && bash install.sh install 0.3.2 | STRING |
| HIGH | plugins/cryptocurrency_trade/ccxt/test/p1.py | 5 | cd /www/server/mdserver-web && python3 plugins/cryptocurrency_trade/ccxt/test/p1.py | STRING |
| HIGH⚡ | plugins/cryptocurrency_trade/ccxt/test/p_test.py | 15 | cd /www/server/mdserver-web && . bin/activate && source activate catalys | STRING |
| HIGH⚡ | plugins/cryptocurrency_trade/ccxt/test/p_test.py | 17 | cd /Users/midoks/Desktop/mwdev/server/mdserver-web && python3 plugins/cryptocurrency_trade/ccxt/test/p_test.py | STRING |
| HIGH⚡ | plugins/cryptocurrency_trade/ccxt/test/p_test.py | 20 | cd /www/server/mdserver-web && python3 plugins/cryptocurrency_trade/ccxt/test/p_test.py | STRING |
| HIGH | plugins/cryptocurrency_trade/ccxt/test/p2.py | 5 | cd /www/server/mdserver-web && python3 plugins/cryptocurrency_trade/ccxt/test/p1.py | STRING |
| HIGH | plugins/caddy/tool_task.py | 80 | cmd += 'cd $mw_dir && bash $script_path/check.sh' + "\n" | STRING |
| HIGH | plugins/apache/tool_task.py | 80 | cmd += 'cd $mw_dir && bash $script_path/check.sh' + "\n" | STRING |
| HIGH | web/admin/setup/init_cmd.py | 43 | mw.execShell('which chkconfig && chkconfig --add mw') | CODE |
| HIGH | web/admin/setup/init_cmd.py | 52 | mw.execShell('which update-rc.d && update-rc.d -f mw defaults') | CODE |
| HIGH | web/utils/firewall.py | 505 | mw.execShell("which systemctl && systemctl restart sshd") | CODE |
| HIGH | web/utils/firewall.py | 533 | mw.execShell("which systemctl && systemctl restart sshd") | CODE |
| HIGH | web/utils/file.py | 244 | os.system('which chattr && chattr -i ' + filename) | CODE |
| HIGH | web/utils/file.py | 776 | cmd = "which chattr && chattr -i {0}".format(path) | CODE |
| HIGH | web/utils/file.py | 797 | os.system("which chattr && chattr -i '" + path + "'") | CODE |
| HIGH | web/utils/file.py | 905 | mw.execShell('which chattr && chattr -R -i ' + rb_dir) | CODE |
| HIGH | web/utils/site.py | 750 | mw.execShell("which chattr && chattr -i " + filename) | CODE |
| 7 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | panel_task.py | 1 | # coding: utf-8 | COMMENT |
| LOW | panel_tools.py | 1 | # coding=utf-8 | COMMENT |
| LOW | ssl/README.md | 1 | # 数据目录 | COMMENT |
| LOW | docker/start.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/gorse/tpl/gorse.toml | 1 | [database] | COMMENT |
| LOW | plugins/postgresql/index.py | 1181 | def getSlaveList(version=''): | COMMENT |
| LOW | plugins/loki/conf/loki-config.yaml | 61 | # | COMMENT |
| LOW | plugins/loki/conf/loki-config.bak.yaml | 61 | # Statistics help us better understand how Loki is used, and they show us performance | COMMENT |
| LOW | plugins/docker/install.sh | 21 | # "http://hub-mirror.c.163.com", | COMMENT |
| LOW | plugins/tamper_proof_py/index.html | 281 | }); | COMMENT |
| LOW | plugins/mariadb/index.py | 2981 | # local_idx_data = local_select_data[idx] | COMMENT |
| LOW | plugins/xhprof/lib/xhprof_html/index.php | 1 | <?php | COMMENT |
| LOW | plugins/xhprof/lib/xhprof_html/index.php | 21 | // | COMMENT |
| LOW | plugins/xhprof/lib/xhprof_html/callgraph.php | 1 | <?php | COMMENT |
| LOW | plugins/xhprof/lib/xhprof_html/typeahead.php | 1 | <?php | COMMENT |
| LOW | plugins/xhprof/lib/xhprof_html/jquery/jquery-1.2.6.js | 3381 | // IE adds the HTML element's border, by default it is medium which is 2px | COMMENT |
| LOW | plugins/xhprof/lib/xhprof_lib/utils/xhprof_lib.php | 1 | <?php | COMMENT |
| LOW | plugins/xhprof/lib/xhprof_lib/utils/xhprof_runs.php | 1 | <?php | COMMENT |
| LOW | plugins/xhprof/lib/xhprof_lib/utils/callgraph_utils.php | 1 | <?php | COMMENT |
| LOW | plugins/xhprof/lib/xhprof_lib/display/xhprof.php | 1 | <?php | COMMENT |
| LOW | …ins/xhprof/lib/xhprof_lib/display/typeahead_common.php | 1 | <?php | COMMENT |
| LOW | plugins/openresty/install.sh | 1 | #!/bin/bash | COMMENT |
| LOW | plugins/gdrive/t/test.py | 1 | #!/usr/bin/python | COMMENT |
| LOW | plugins/gdrive/t/test.py | 61 | # print(sign_in_url) | COMMENT |
| LOW | plugins/gdrive/t/test.py | 81 | # url = 'http://localhost/?code=M.C106_BAY.2.310112f3-a158-c400-9667-d158cbd1de6c&state=jEJz0ucR9bpZYD9PGxp2GgRDotrzO6' | COMMENT |
| LOW | plugins/php/versions/all_test.sh | 1 | #! /bin/sh | COMMENT |
| LOW | plugins/php/versions/all_mac.sh | 1 | #! /bin/sh | COMMENT |
| LOW | plugins/php/versions/all_mac.sh | 21 | # cd $DIR && /bin/bash install.sh install $PHP_VER | COMMENT |
| LOW | plugins/php/versions/56/src/mkstemp.c | 41 | #ifdef _WIN32 | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 121 | #elif defined(__arm__) || defined(__ARM__) | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 141 | #elif defined(__tilegx__) | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 161 | #if (defined SLJIT_CONFIG_UNSUPPORTED && SLJIT_CONFIG_UNSUPPORTED) | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 201 | In release mode (SLJIT_DEBUG is not defined) only the following | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 221 | /***************************/ | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 241 | #else | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 421 | #define SLJIT_LITTLE_ENDIAN 1 | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 501 | #endif /* !SLJIT_CALL */ | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 541 | #define SLJIT_NUMBER_OF_SAVED_REGISTERS 7 | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 561 | #elif (defined SLJIT_CONFIG_ARM_V5 && SLJIT_CONFIG_ARM_V5) || (defined SLJIT_CONFIG_ARM_V7 && SLJIT_CONFIG_ARM_V7) | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 581 | #define SLJIT_NUMBER_OF_REGISTERS 22 | COMMENT |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 601 | COMMENT | |
| LOW | …ins/php/versions/56/src/ext/pcre/sljitConfigInternal.h | 621 | #define SLJIT_NUMBER_OF_SCRATCH_REGISTERS \ | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 121 | #elif defined(__arm__) || defined(__ARM__) | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 141 | #elif defined(__tilegx__) | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 161 | #if (defined SLJIT_CONFIG_UNSUPPORTED && SLJIT_CONFIG_UNSUPPORTED) | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 201 | In release mode (SLJIT_DEBUG is not defined) only the following | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 221 | /***************************/ | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 241 | #else | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 421 | #define SLJIT_LITTLE_ENDIAN 1 | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 501 | #endif /* !SLJIT_CALL */ | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 541 | #define SLJIT_NUMBER_OF_SAVED_REGISTERS 7 | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 561 | #elif (defined SLJIT_CONFIG_ARM_V5 && SLJIT_CONFIG_ARM_V5) || (defined SLJIT_CONFIG_ARM_V7 && SLJIT_CONFIG_ARM_V7) | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 581 | #define SLJIT_NUMBER_OF_REGISTERS 22 | COMMENT |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 601 | COMMENT | |
| LOW | …ins/php/versions/54/src/ext/pcre/sljitConfigInternal.h | 621 | #define SLJIT_NUMBER_OF_SCRATCH_REGISTERS \ | COMMENT |
| LOW | plugins/php/versions/common/intl.sh | 21 | # elif grep -Eq "FreeBSD" /etc/*-release; then | COMMENT |
| LOW | …ins/php/versions/55/src/ext/pcre/sljitConfigInternal.h | 121 | #elif defined(__arm__) || defined(__ARM__) | COMMENT |
| LOW | …ins/php/versions/55/src/ext/pcre/sljitConfigInternal.h | 141 | #elif defined(__tilegx__) | COMMENT |
| LOW | …ins/php/versions/55/src/ext/pcre/sljitConfigInternal.h | 161 | #if (defined SLJIT_CONFIG_UNSUPPORTED && SLJIT_CONFIG_UNSUPPORTED) | COMMENT |
| LOW | …ins/php/versions/55/src/ext/pcre/sljitConfigInternal.h | 201 | In release mode (SLJIT_DEBUG is not defined) only the following | COMMENT |
| 105 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | panel_task.py | 79 | CODE | |
| LOW | panel_tools.py | 49 | CODE | |
| LOW | panel_tools.py | 397 | CODE | |
| LOW | plugins/postgresql/index.py | 499 | CODE | |
| LOW | plugins/postgresql/index.py | 512 | CODE | |
| LOW | plugins/postgresql/class/pg.py | 150 | CODE | |
| LOW | plugins/system_safe/system_safe.py | 278 | CODE | |
| LOW | plugins/system_safe/system_safe.py | 865 | CODE | |
| LOW | plugins/system_safe/system_safe.py | 915 | CODE | |
| LOW | plugins/system_safe/system_safe.py | 986 | CODE | |
| LOW | plugins/rsyncd/tool_task.py | 127 | CODE | |
| LOW | plugins/rsyncd/index.py | 460 | CODE | |
| LOW | plugins/tamper_proof_py/index.py | 110 | CODE | |
| LOW | plugins/tamper_proof_py/index.py | 338 | CODE | |
| LOW | plugins/mariadb/index.py | 273 | CODE | |
| LOW | plugins/mariadb/index.py | 2776 | CODE | |
| LOW | plugins/openresty/index.py | 539 | CODE | |
| LOW | plugins/phpmyadmin/index.py | 124 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 103 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 169 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 502 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 549 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 648 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 678 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 800 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 1131 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 1195 | CODE | |
| LOW | plugins/task_manager/task_manager_index.py | 1428 | CODE | |
| LOW | plugins/task_manager/process_network_total.py | 52 | CODE | |
| LOW | plugins/task_manager/process_network_total.py | 87 | CODE | |
| LOW | plugins/task_manager/process_network_total.py | 186 | CODE | |
| LOW | plugins/php/index.py | 832 | CODE | |
| LOW | plugins/mysql-community/index.py | 288 | CODE | |
| LOW | plugins/mysql-community/index.py | 531 | CODE | |
| LOW | plugins/mysql-community/index.py | 2898 | CODE | |
| LOW | plugins/webstats/tool_task.py | 104 | CODE | |
| LOW | plugins/webstats/tool_migrate.py | 227 | CODE | |
| LOW | plugins/webstats/index.py | 576 | CODE | |
| LOW | plugins/webstats/index.py | 619 | CODE | |
| LOW | plugins/webstats/index.py | 755 | CODE | |
| LOW | plugins/webstats/index.py | 884 | CODE | |
| LOW | plugins/webstats/index.py | 949 | CODE | |
| LOW | plugins/webstats/index.py | 1082 | CODE | |
| LOW | plugins/webstats/index.py | 1223 | CODE | |
| LOW | plugins/webstats/index.py | 1321 | CODE | |
| LOW | plugins/webstats/index.py | 1344 | CODE | |
| LOW | plugins/webstats/webstats_index.py | 532 | CODE | |
| LOW | plugins/webstats/webstats_index.py | 575 | CODE | |
| LOW | plugins/webstats/webstats_index.py | 709 | CODE | |
| LOW | plugins/webstats/webstats_index.py | 843 | CODE | |
| LOW | plugins/webstats/webstats_index.py | 908 | CODE | |
| LOW | plugins/webstats/webstats_index.py | 1041 | CODE | |
| LOW | plugins/webstats/webstats_index.py | 1182 | CODE | |
| LOW | plugins/webstats/webstats_index.py | 1280 | CODE | |
| LOW | plugins/webstats/webstats_index.py | 1303 | CODE | |
| LOW | plugins/webstats/bak/tool_migrate.py | 212 | CODE | |
| LOW | plugins/webstats/bak/tool_migrate_bak.py | 75 | CODE | |
| LOW | plugins/webstats/class/LuaMaker.py | 10 | CODE | |
| LOW | plugins/webstats/class/LuaMaker.py | 17 | CODE | |
| LOW | plugins/gitea/index.py | 576 | CODE | |
| 78 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | plugins/imail/index.py | 0 | #!/bin/bash path=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin export path export user=%s export ho | STRING |
| HIGH | plugins/gitea/index.py | 0 | #!/bin/bash path=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin export path export user=%s export ho | STRING |
| HIGH | plugins/simpleping/index.py | 0 | #!/bin/bash path=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin export path export user=%s export ho | STRING |
| HIGH | plugins/gogs/index.py | 0 | #!/bin/bash path=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin export path export user=%s export ho | STRING |
| HIGH | plugins/acme_pandominassl_apply/tool_cron.py | 0 | mw_dir=%s rname=%s plugin_path=%s script_path=%s logs_file=$plugin_path/${rname}.log | STRING |
| HIGH | plugins/clean/tool_task.py | 0 | mw_dir=%s rname=%s plugin_path=%s script_path=%s logs_file=$plugin_path/${rname}.log | STRING |
| HIGH | plugins/sphinx/tool_cron.py | 0 | mw_dir=%s rname=%s plugin_path=%s script_path=%s logs_file=$plugin_path/${rname}.log | STRING |
| HIGH | plugins/manticoresearch/tool_cron.py | 0 | mw_dir=%s rname=%s plugin_path=%s script_path=%s logs_file=$plugin_path/${rname}.log | STRING |
| HIGH | plugins/op_waf/tool_task.py | 0 | mw_dir=%s rname=%s plugin_path=%s script_path=%s logs_file=$plugin_path/${rname}.log | STRING |
| HIGH | plugins/webstats/t/index.py | 0 | 发送post请求 @url 被请求的url地址(必需) @data post参数,可以是字符串或字典(必需) @timeout 超时时间默认60秒 return string | STRING |
| HIGH | plugins/tgbot/startup/extend/receive_music163_search.py | 0 | 发送post请求 @url 被请求的url地址(必需) @data post参数,可以是字符串或字典(必需) @timeout 超时时间默认60秒 return string | STRING |
| HIGH | plugins/op_waf/t/index.py | 0 | 发送post请求 @url 被请求的url地址(必需) @data post参数,可以是字符串或字典(必需) @timeout 超时时间默认60秒 return string | STRING |
| HIGH | web/core/mw.py | 0 | 发送post请求 @url 被请求的url地址(必需) @data post参数,可以是字符串或字典(必需) @timeout 超时时间默认60秒 return string | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | web/static/js/jquery-ui.min.js | 6 | (function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)})(function(t){function e(t){for(var e= | CODE |
| CRITICAL⚡ | web/static/js/jquery-ui.min.js | 9 | }},_updateDatepicker:function(e){this.maxRows=4,m=e,e.dpDiv.empty().append(this._generateHTML(e)),this._attachHandlers(e | CODE |
| CRITICAL | web/static/js/jquery-1.10.2.min.js | 4 | }({});var B=/(?:\{[\s\S]*\}|\[[\s\S]*\])$/,P=/([A-Z])/g;function R(e,n,r,i){if(x.acceptData(e)){var o,a,s=x.expando,l=e. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/webhook/index.py | 78 | CODE | |
| LOW | plugins/webhook/webhook_index.py | 44 | CODE | |
| LOW | plugins/system_safe/system_safe.py | 1136 | CODE | |
| LOW | plugins/system_safe/system_safe.py | 197 | CODE | |
| LOW | plugins/rsyncd/index.py | 241 | CODE | |
| LOW | plugins/acme_pandominassl_apply/hooks/goedge.py | 71 | CODE | |
| LOW | plugins/lam/index.py | 169 | CODE | |
| LOW | plugins/lam/index.py | 175 | CODE | |
| LOW | plugins/phpmyadmin/index.py | 188 | CODE | |
| LOW | plugins/phpmyadmin/index.py | 194 | CODE | |
| LOW | plugins/varnish/index.py | 118 | CODE | |
| LOW | plugins/webstats/tool_migrate.py | 45 | CODE | |
| LOW | plugins/webstats/bak/tool_migrate.py | 44 | CODE | |
| LOW | plugins/webstats/bak/tool_migrate_bak.py | 43 | CODE | |
| LOW | plugins/nezha/index.py | 87 | CODE | |
| LOW | plugins/pgadmin/index.py | 127 | CODE | |
| LOW | plugins/pgadmin/index.py | 133 | CODE | |
| LOW | plugins/mysql/bak/orm.py | 212 | CODE | |
| LOW | plugins/mysql/bak/orm.py | 244 | CODE | |
| LOW | plugins/mysql/bak/orm.py | 264 | CODE | |
| LOW | plugins/mysql/bak/orm.py | 284 | CODE | |
| LOW | plugins/phpldapadmin/index.py | 169 | CODE | |
| LOW | plugins/phpldapadmin/index.py | 175 | CODE | |
| LOW | plugins/msonedrive/class/msodclient.py | 536 | CODE | |
| LOW | plugins/simpleping/simpleping_index.py | 55 | CODE | |
| LOW | plugins/cryptocurrency_trade/cryptocurrency_trade.py | 203 | CODE | |
| LOW | plugins/cryptocurrency_trade/cryptocurrency_trade.py | 211 | CODE | |
| LOW | plugins/cryptocurrency_trade/ccxt/public_data/data.py | 254 | CODE | |
| LOW | plugins/cryptocurrency_trade/ccxt/public_data/data.py | 260 | CODE | |
| LOW | web/misc/test/api/mw_api.py | 46 | CODE | |
| LOW | web/core/mw.py | 203 | CODE | |
| LOW | web/core/mw.py | 1699 | CODE | |
| LOW | web/admin/crontab/__init__.py | 79 | CODE | |
| LOW | web/admin/crontab/__init__.py | 102 | CODE | |
| LOW | web/admin/files/files.py | 298 | CODE | |
| LOW | web/utils/system/query.py | 73 | CODE | |
| LOW | web/utils/system/query.py | 82 | CODE | |
| LOW | web/utils/system/query.py | 91 | CODE | |
| LOW | web/utils/system/query.py | 101 | CODE | |
| LOW | web/thisdb/temp_login.py | 57 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/postgresql/js/postgresql.js | 936 | function getMasterRepSlaveListPage(){ | CODE |
| LOW | plugins/system_safe/js/app.js | 449 | function ssLogAuditFileRenderString(data){ | CODE |
| LOW | plugins/system_safe/js/app.js | 459 | function ssLogAuditFileRenderObject(plist){ | CODE |
| LOW | plugins/docker/js/docker.js | 529 | function dockerPullImagesFileTemplate() { | CODE |
| LOW | plugins/mariadb/js/mariadb.js | 1885 | function getMasterRepSlaveListPage(){ | CODE |
| LOW | plugins/openresty/index.py | 314 | def op_submit_systemctl_restart(): | CODE |
| LOW | plugins/mysql-community/js/mysql-community.js | 1908 | function getMasterRepSlaveListPage(){ | CODE |
| LOW | plugins/mysql/js/mysql.js | 1956 | function getMasterRepSlaveListPage(){ | CODE |
| LOW | plugins/msonedrive/class/msodclient.py | 111 | def get_token_from_authorized_url(self, authorized_url, expected_state=None): | CODE |
| LOW | plugins/simpleping/js/simpleping.js | 352 | function pingMySQLDataGraphPosData(){ | CODE |
| LOW | plugins/data_query/static/js/app.js | 439 | function mysqlCommonFuncRedundantIndexes(){ | CODE |
| LOW | plugins/data_query/static/js/app.js | 764 | function mysqlCommonFuncDeadlockInfo(){ | CODE |
| LOW | plugins/data_query/static/js/app.js | 791 | function mysqlCommonFuncSlaveStatus(){ | CODE |
| LOW | plugins/apache/index.py | 212 | def op_submit_systemctl_restart(): | CODE |
| LOW | plugins/apache/js/httpd.js | 163 | function startHttpdStatusAutoRefresh() { | CODE |
| LOW | plugins/apache/js/httpd.js | 177 | function stopHttpdStatusAutoRefresh() { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/op_load_balance/js/app.js | 250 | $('textarea[name="load_domain"]').attr('placeholder','每行填写一个域名,默认为80端口。\n泛解析添加方法 *.domain.com\n如另加端口格式为 www. | CODE |
| LOW | plugins/php/js/php.js | 546 | $('input[name="passwd"]').attr('placeholder','如果没有密码留空'); | CODE |
| LOW | plugins/php/js/php.js | 556 | $('input[name="passwd"]').attr('placeholder','如果没有密码留空'); | CODE |
| LOW | plugins/php-yum/js/php.js | 435 | $('input[name="passwd"]').attr('placeholder','如果没有密码留空'); | CODE |
| LOW | plugins/php-yum/js/php.js | 445 | $('input[name="passwd"]').attr('placeholder','如果没有密码留空'); | CODE |
| LOW | plugins/php-apt/js/php.js | 466 | $('input[name="passwd"]').attr('placeholder','如果没有密码留空'); | CODE |
| LOW | plugins/php-apt/js/php.js | 476 | $('input[name="passwd"]').attr('placeholder','如果没有密码留空'); | CODE |
| LOW | web/static/codemirror/addon/display/placeholder.js | 1 | (function(a){if(typeof exports=="object"&&typeof module=="object"){a(require("../../lib/codemirror"))}else{if(typeof def | CODE |
| LOW | web/static/app/firewall.js | 45 | $("#AcceptPort").attr('placeholder',p); | CODE |
| LOW | web/static/app/site.js | 322 | var placeholder = $("#inputPath").attr('placeholder'); | CODE |
| LOW | web/static/app/site.js | 1057 | var placeholder = "<div class='placeholder'>每行填写一个域名,默认为80端口<br>泛解析添加方法 *.domain.com<br>如另加端口格式为 www.domain.com:88</d | CODE |
| LOW⚡ | web/static/js/jquery-ui.min.js | 6 | (function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)})(function(t){function e(t){for(var e= | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugins/doh/index.py | 73 | CODE | |
| MEDIUM | plugins/doh/index.py | 75 | CODE | |
| MEDIUM | plugins/mysql/index.py | 1226 | CODE | |
| MEDIUM | plugins/migration_api/index.py | 572 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …s/xhprof/lib/xhprof_html/jquery/jquery.autocomplete.js | 342 | // try to leverage ajaxQueue plugin to abort previous requests | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/utils/php/fcgi_client.py | 39 | __all__ = ['FCGIApp'] | CODE |