ClamAV flags a virus within Bookstack test-data #1431

Closed
opened 2026-02-05 00:52:37 +03:00 by OVERLORD · 1 comment
Owner

Originally created by @davidtessier on GitHub (Oct 30, 2019).

Describe the bug

I ran a system scan with ClamAV today and the scan result flagged two files in this app as trojans. Can someone explain why this is happening?

/var/www/bookstack/tests/test-data/bad.php: Win.Trojan.Hide-2 FOUND
/var/www/bookstack/tests/test-data/bad.phtml: Win.Trojan.Hide-2 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 6519624
Engine version: 0.101.4
Scanned directories: 77309
Scanned files: 378698
Infected files: 2
Data scanned: 13175.25 MB
Data read: 24070.79 MB (ratio 0.55:1)
Time: 4384.826 sec (73 m 4 s)

Steps To Reproduce
Steps to reproduce the behavior:

  1. Run a virus scan with ClamAV on your web server.

Your Configuration (please complete the following information):

  • BookStack v0.27.5
  • PHP Version: 7.2.24
  • Hosting Method: Apache
Originally created by @davidtessier on GitHub (Oct 30, 2019). **Describe the bug** I ran a system scan with ClamAV today and the scan result flagged two files in this app as trojans. Can someone explain why this is happening? ``` /var/www/bookstack/tests/test-data/bad.php: Win.Trojan.Hide-2 FOUND /var/www/bookstack/tests/test-data/bad.phtml: Win.Trojan.Hide-2 FOUND ----------- SCAN SUMMARY ----------- Known viruses: 6519624 Engine version: 0.101.4 Scanned directories: 77309 Scanned files: 378698 Infected files: 2 Data scanned: 13175.25 MB Data read: 24070.79 MB (ratio 0.55:1) Time: 4384.826 sec (73 m 4 s) ``` **Steps To Reproduce** Steps to reproduce the behavior: 1. Run a virus scan with ClamAV on your web server. **Your Configuration (please complete the following information):** - BookStack v0.27.5 - PHP Version: 7.2.24 - Hosting Method: Apache
Author
Owner

@davidtessier commented on GitHub (Oct 30, 2019):

My first search of this repo didn't turn up any previous issues opened for this, but I later found this https://github.com/BookStackApp/BookStack/issues/1571 was already open for the topic.

I have also deleted these two files from my server, and will monitor that issue for a solution.

@davidtessier commented on GitHub (Oct 30, 2019): My first search of this repo didn't turn up any previous issues opened for this, but I later found this https://github.com/BookStackApp/BookStack/issues/1571 was already open for the topic. I have also deleted these two files from my server, and will monitor that issue for a solution.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#1431