Website shows infected with HTML:HideSeoSpam-B [Trj]

system · 2017-10-31T08:24:33.000Z

My site wiac740.com/portal is showing HTML:HideSeoSpam-B [Trj] error on click home page URL. We have cleaned my WordPress site wiac740.com/portal data and checked all files on site. Can you please remove restriction on hxtp://wiac740.com/portal site home page. Site inner pages are working but with home page is showing HTML:HideSeoSpam-B [Trj] error with Avast Security.

Can you please white-list my site wiac740.com/portal and remove that restriction as soon as possible.

Milos · 2017-10-31T10:25:56.000Z

Hello,
see the selected code in the attached image. Is it there intentionally? This is why avast alerts.

Milos

polonus · 2017-10-31T10:27:54.000Z

Hi vermadilipjpr,

You have a misconfiguration in your CMS → Warning Directory Indexing Enabled
In the test we attempted to list the directory contents of the uploads and plugins folders to determine if Directory Indexing is enabled. This is an information leakage vulnerability that can reveal sensitive information regarding your site configuration or content.

/wp-content/uploads/ enabled
/wp-content/plugins/ disabled
Directory indexing was tested on the /wp-content/uploads/ and /wp-content/plugins/ directores. Note that other directories may have this web server feature enabled, so ensure you check other folders in your installation. It is good practice to ensure directory indexing is disabled for your full WordPress installation either through the web server configuration or .htaccess.

This in combination with known Varnish exploits could lead to compromittal. This comes blocked by any good adblocker →
-https://pixel.adsafeprotected.com/jload?anId=9406&planId=1&campId=13595732&pubId=1&chanId=http://wiac740.com/portal/&placementId=0&impId=ABAjH0j48ctR6ul-sLEBLIsRpKOa&adsafe_par

3 vulnerable retirable jQuery libraries detected: http://retire.insecurity.today/#!/scan/13fedc32d454bc987675e8d008a3a84cb857883e10f66d554bc58f8d8bc72218

Whether you site could come unblocked by avast, wait for an avast team member to react, as we are just volunteers with relevant knowledge, but only avast team members can come and unblock. Reaction was there already (pol)

Warning: For minors that use our forums as well, do not visit mentioned website as it is marked as adult content!

polonus (volunteer website security analyst and website error-hunter)

Announcements