2025-10-10 08:00:01.123 INFO [main] com.webapp.Application - Application starting on port 8080 2025-10-10 08:00:01.456 INFO [main] com.webapp.Application - Active profiles: production 2025-10-10 08:00:02.012 INFO [main] com.webapp.db.ConnectionPool - Initializing database connection pool 2025-10-10 08:00:02.234 DEBUG [main] com.webapp.db.ConnectionPool - Connection string: jdbc:mysql://db-prod-03.internal:3306/webapp_prod?user=webapp_svc&password=Pr0d_DB!pass2025&useSSL=true 2025-10-10 08:00:02.567 INFO [main] com.webapp.db.ConnectionPool - Pool initialized: min=5, max=20, timeout=30000ms 2025-10-10 08:00:03.001 INFO [main] com.webapp.cache.RedisClient - Connecting to Redis at cache-01.internal:6379 2025-10-10 08:00:03.112 INFO [main] com.webapp.Application - Application started successfully in 2.989s 2025-10-10 08:00:03.200 DEBUG [main] com.webapp.integrations.PaymentGateway - Stripe API key loaded: sk-fake-REDACTED123-stripe-live-key-do-not-share 2025-10-10 08:00:03.201 DEBUG [main] com.webapp.integrations.EmailService - SendGrid API key: SG.fake-REDACTED456-sendgrid-api-key-not-real 2025-10-10 08:00:03.202 DEBUG [main] com.webapp.integrations.CloudStorage - AWS credentials loaded from /opt/webapp/config/aws-credentials.json 2025-10-10 09:42:07.445 INFO [http-8080-12] com.webapp.auth.AuthController - Successful login: user=admin, ip=10.0.14.88 2025-10-10 09:42:07.446 DEBUG [http-8080-12] com.webapp.auth.SessionManager - Created session: sid=a3f8c912-4b5e-4d1a-9876-1234abcd5678, user=admin, expires=2025-10-10T21:42:07Z 2025-10-10 10:05:42.112 ERROR [http-8080-7] com.webapp.search.SearchController - SQL error in search query java.sql.SQLException: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''OR 1=1-- -' at line 1 at com.mysql.cj.jdbc.exceptions.SQLError.createSQLException(SQLError.java:129) at com.webapp.search.SearchService.executeQuery(SearchService.java:87) at com.webapp.search.SearchController.handleSearch(SearchController.java:42) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 2025-10-10 10:05:42.113 DEBUG [http-8080-7] com.webapp.search.SearchService - Failed query: SELECT * FROM products WHERE name LIKE '%laptop'OR 1=1-- -%' ORDER BY relevance DESC 2025-10-10 10:08:12.334 ERROR [http-8080-9] com.webapp.files.FileController - Path traversal detected java.io.IOException: Resolved path /etc/passwd is outside base directory /opt/webapp/uploads at com.webapp.files.FileService.resolveSecurePath(FileService.java:55) at com.webapp.files.FileController.downloadFile(FileController.java:31) 2025-10-10 10:08:12.335 DEBUG [http-8080-9] com.webapp.files.FileService - Requested path: ../../../etc/passwd, resolved: /etc/passwd, base: /opt/webapp/uploads 2025-10-10 10:08:15.221 WARN [http-8080-9] com.webapp.files.FileController - Sensitive file access attempt: /home/webapp/.ssh/id_rsa from ip=10.0.14.88 2025-10-10 10:08:18.445 DEBUG [http-8080-9] com.webapp.files.FileService - Serving file: /proc/self/environ (547 bytes) to ip=10.0.14.88 2025-10-10 10:40:30.112 INFO [http-8080-14] com.webapp.admin.UserController - New user created via API: username=backdoor, role=user, created_by=admin, ip=10.0.14.88 2025-10-10 10:40:35.223 WARN [http-8080-14] com.webapp.admin.UserController - User role updated: username=backdoor, old_role=user, new_role=admin, updated_by=admin, ip=10.0.14.88 2025-10-10 11:10:22.567 ERROR [http-8080-3] com.webapp.search.SearchController - Critical SQL error java.sql.SQLException: Query execution was interrupted at com.mysql.cj.jdbc.exceptions.SQLError.createSQLException(SQLError.java:129) at com.webapp.search.SearchService.executeQuery(SearchService.java:87) 2025-10-10 11:10:22.568 DEBUG [http-8080-3] com.webapp.search.SearchService - Failed query: SELECT * FROM products WHERE name LIKE '%'; DROP TABLE users;-- -%' ORDER BY relevance DESC 2025-10-10 11:10:25.890 DEBUG [http-8080-3] com.webapp.search.SearchService - Query took 5002ms (timeout threshold: 5000ms): SELECT * FROM products WHERE name LIKE '%'; SELECT SLEEP(5)-- -%' ORDER BY relevance DESC 2025-10-10 11:35:05.112 INFO [http-8080-18] com.webapp.admin.ExportController - Data export: table=users, format=csv, rows=342, requested_by=backdoor, ip=10.0.14.88 2025-10-10 11:35:08.445 INFO [http-8080-18] com.webapp.admin.ExportController - Data export: table=orders, format=csv, rows=8941, requested_by=backdoor, ip=10.0.14.88 2025-10-10 11:35:12.778 INFO [http-8080-18] com.webapp.admin.ExportController - Data export: table=payment_methods, format=csv, rows=1205, requested_by=backdoor, ip=10.0.14.88 2025-10-10 11:35:12.779 DEBUG [http-8080-18] com.webapp.admin.ExportController - Export completed. Total data exported: 257.4 KB to ip=10.0.14.88. Session: sid=a3f8c912-4b5e-4d1a-9876-1234abcd5678