Anyone else seeing issues with links to illegal movie site being embedded within your DNN site outside the normal browser viewable area?  These links are to sites like globalmovies.net, alfamovie.com, ftmovie.com, 100kmovie.com, etc.  It looks like someone has hacked DNN and placed them on legit sites (ones that Google views as legit) for a cross reference boost to their search results within Google.  This would raise these illegal movie sites higher in the search results returned to a typical Google user looking for movies.  These do appear to be scam sites offering illegal copies of Hollywood films or just stealing accounts from users unaware of the site intent.  Anyone aware of this vulnerability and if it is related to a DNN ASP.NET issue or the Effority module database where the content seems to be largely placed?

DNN 04.09.04 though the attack appears limited to just the 'Text/HTML with Workflow' data table of which we are running Effority.net's 00.05.01 version.

I don't see any listing of the issue in their issuetracker - http://workflow.codeplex.com/workitem/list/basic , perhaps you could log one with more details then they can look to resolve it (very good work determining the issue BTW)

---

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US