ok,,,, so this hacking issue is killing me!
Another rash of spam initiating from my site again.  I have gone through all the directories and cannot find anything that looks out of place or malicious code.

I have changed all the passwords, reviewed all the users, and cannot find where the leak is.

I deleted the first email address at my host, and now they are using another one it would appear.  This address forwards to three people, but only two of them are receiving bouncebacks (I am not).

I have deleted any modules that I don't use.
I have checked the logs - I have a ton of errors like the following so I know they are being initiated through DNN.

AssemblyVersion: -1
PortalID: -1
PortalName:
UserID: -1
UserName:
ActiveTabID: -1
ActiveTabName:
RawURL:
AbsoluteURL:
AbsoluteURLReferrer:
UserAgent:
DefaultDataProvider:
ExceptionGUID:
InnerException: The email address (hormigo71@hotmail.essakurasan) is not in a valid format.
FileName:
FileLineNumber: -1
FileColumnNumber: -1
Method:
StackTrace:
Message: System.ArgumentException: The email address (hormigo71@hotmail.essakurasan) is not in a valid format.
Source:
Server Name: C15472-154820


I sure would appreciate any help or guidance I can get.  It is obvious that someone has access, but I cannot figure out how or where they injected code.  I am getting desperate!!!!

Please send any details to security@dotnetnuke.com and we can have a more detailed look at it for you. BTW I would also recommend you change the forms name parameter to invalidate all existing user accounts in case you lost admin/host credentials through a xss-attack (e.g. change

---

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US