Strange HTML Tag?

Posted on 16th Feb 2014 07:03 pm by admin

I recently noticed some odd HTML appear in some of the websites I host. Not all of them are run on a CMS but the majority (but not all) are running through the same FTP account.

I've searched everywhere for documentation, forums, notes on this particular exploit but haven't been able to find anything. Essentially, there is a small HTML snippet (see below) that appears right before the </html> tag. It's really odd and the characters inside the <b1> are all different strings.

Here's the code that's appearing:
Code: <b1><!--6FY8rhRLeNoNyVsOwiAQBdAdca0PXE5DYVKngSkZrsG4ej2/B80UJt+FlytuMcbnHbmqHEcoMnS3r9aaRshnw5QN+TT+F7NMUFqviTLgXCnuyei6vU3WY3lArcgn9Ff/AVyxJcZ=--></b1>
It's evident that the code is some type of exploit but I'm not sure how deep this goes. Anyone heard of anything like this, or have any idea of what the potential issues that could occur? Thanks for your help!

-suess0r

Your Answer:

Login to answer

Other forums

BB_Code error
I'm having a problem with a custom built function and keep getting this error:


Warning: M

Time-based image rotation script
I'm trying to write a PHP script that rotates an image based on what time of day it is. I want the

Menu restriction
How can I restrict the individual menu that would appear when a user logs in so that all users are c

Need help with an email blocker for a guessbook
I am new with php and here is a simple guessbook page but I am being hit with spam from a group of t

registration form
first time posting. did some searches but didnt find exactly what i am looking for. dont flame cause

Encrypt php code?
Is it possible to encrypt php code in files,
so that it displays a load of unreadable characters

An odd assignment statement. Can someone explain this assignment to me?
What purpose is served by the bit of code between the two equal signs in the $installurl set? Is th

Show specific day of the week
I have been racking my brain trying to get this function to work properly and it is doing so for eve

IS this code correct
The reason i ask is everything underneath it appears to be alink as well, tis blimmin annoying

Form Help
Here is the form:

Line number On/Off | Expand/Contract<? include("../include/sess