Strange HTML Tag?

Posted on 16th Feb 2014 07:03 pm by admin

I recently noticed some odd HTML appear in some of the websites I host. Not all of them are run on a CMS but the majority (but not all) are running through the same FTP account.

I've searched everywhere for documentation, forums, notes on this particular exploit but haven't been able to find anything. Essentially, there is a small HTML snippet (see below) that appears right before the </html> tag. It's really odd and the characters inside the <b1> are all different strings.

Here's the code that's appearing:
Code: <b1><!--6FY8rhRLeNoNyVsOwiAQBdAdca0PXE5DYVKngSkZrsG4ej2/B80UJt+FlytuMcbnHbmqHEcoMnS3r9aaRshnw5QN+TT+F7NMUFqviTLgXCnuyei6vU3WY3lArcgn9Ff/AVyxJcZ=--></b1>
It's evident that the code is some type of exploit but I'm not sure how deep this goes. Anyone heard of anything like this, or have any idea of what the potential issues that could occur? Thanks for your help!

-suess0r

Your Answer:

Login to answer

Other forums

Is this Safe or Unsafe?
Hi i made a few pages with lots of peoples help now i just want to know if they are safe or not can

CE 7.1 and External GIS integration
Hi All,

We want to develop an application on CE 7.1 which uses GIS features from an exter

Struct/union and scope problem!
HI all , I have
Code: in header.h typedef struct Node Link; /* ---------

Read from forum
Haven't written anything forever and I would like to get back.
What I'm trying to do is getting t

Google Map
I have done Google Map Integration for one my project. But for that we need the "latitude and l

Using CSS to format MySQL query
Hi,

If i want to have a news page on my site, which displays all records of a table in descen

Firewall / visited websites logger
Hi. I have a firewall implementation and I want to log all the websites visited on the machine. S

Mass activity scheduling
Hi experts,

Im facing some problems to deal with mass activity jobs.
When I run some

Need PHP help... have all the elements... just need help putting them together :
Hey Guys,

I was wondering if someone could help me. I am doing a website for a client which

Curly Bracket Delimeters.
I'd always believed that the starting and ending delimeters in preg_ functions had to be the same ch