{'context_id': 487, 'vulnerable': True, 'processing': False, 'request': {'url': 'http://www.davis-taylor.com/taglogin.php', 'method': 'GET', 'headers': {'HOST': '127.0.0.1:5000', 'USER_AGENT': 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0', 'ACCEPT': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'ACCEPT_LANGUAGE': 'en-US,en;q=0.5', 'ACCEPT_ENCODING': 'gzip, deflate, br, zstd', 'CONNECTION': 'keep-alive', 'COOKIE': 'csrftoken=7GgBqVlBL6WuGdfu3e6EBXep8N5vFiVm; grafana_session=54c841e9cb2f4956a7c791efd284d120; grafana_session_expiry=1735995560; user_id=2; session_token=b3c634c91e1711c794704a031918a34b', 'UPGRADE_INSECURE_REQUESTS': '1', 'SEC_FETCH_DEST': 'document', 'SEC_FETCH_MODE': 'navigate', 'SEC_FETCH_SITE': 'same-origin', 'PRIORITY': 'u=0, i', 'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'Mozilla/5.0 (Windows NT 5.2) AppleWebKit/536.2 (KHTML, like Gecko) Chrome/16.0.812.0 Safari/536.2'}, 'body': b'csrfmiddlewaretoken=06972a93-450b-483a-b3b3-0a6c92d85347&newpass1=e3RLGacm&newpass2=wHIL6CKR'}, 'control_flow': {0: "search_query = request.args.get('q')", 1: 'comments = db.get(search_query)', 2: 'db = init()', 3: "db = sqlite3.connect('data.db')", 4: "db.cursor().execute('CREATE TABLE IF NOT EXISTS comments (id INTEGER PRIMARY KEY, comment TEXT, date TEXT)')", 5: 'return db', 6: 'results = []', 7: "for(comment, date) in db.cursor().execute('SELECT comment, date FROM comments').fetchall():", 8: 'return results', 9: 'form = forms.AddCommentForm()', 10: 'if form.validate_on_submit():', 11: "return render_template('guestbook.html', form=form, comments=comments, search_query=search_query)", 12: '{% autoescape False %}', 13: '', 14: '<html>', 15: '<p class="comment-date">Posted on {{ date }}</p>', 16: '</div>', 17: '', 18: '<head>', 19: '<!-- Required meta tags -->', 20: '<meta charset="utf-8">', 21: '<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">', 22: '', 23: '<title>My Guestbook</title>', 24: '', 25: '<!-- Bootstrap CSS -->', 26: '<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css"', 27: 'integrity="sha384-9aIt2nRpC12Uk9gS9baDl411NQApFmC26EwAOH8WgZl5MYYxFfc+NcPb1dKGj7Sk" crossorigin="anonymous">', 28: '', 29: '<!-- Styling -->', 30: '<link rel="stylesheet" type="text/css" href="../static/styles/guestbook.css">', 31: '<link rel="icon" type="image/x-icon" href="../static/guestbook.ico">', 32: '</head>', 33: '', 34: '<div class="content center">', 35: '<div class="container-fluid">', 36: '<form action="{{ url_for(\'guestbook\') }}" method="post">', 37: '{{ form.csrf_token }}', 38: '<div class="row">', 39: '<h3 class="form-header">Add a new Guestbook entry 😊</h3>', 40: '<div class="col">', 41: '{{ form.comment(class="form-control form-comment") }}', 42: '</div>', 43: '<div class="col">', 44: '', 45: '<p class="search-hint">Psssst.. you can even <a href="{{ url_for(\'guestbook\', q=\'test\') }}"', 46: '{% endif %}', 47: '', 48: '{% for comment, date in comments %}', 49: '<div class="comment">'}, 'response': {'status_code': '403', 'headers': {'Content-Type': 'text/html; charset=utf-8', 'Content-Length': '1697', 'Vary': 'Cookie', 'Set-Cookie': 'session=eyJjc3JmX3Rva2VuIjoiMzNkNDNlNjA2MDhiMjdjZjBiMGI1Yzk3NWU4MDExZjRjYWMxMzRhNyJ9.Z5GBRA.Q8r4qzslZbU-6Y0h-x9F551fn1A; HttpOnly; Path=/'}}}