Tony:

The incidence of SQL injection attacks is running very high all over the place, this has been documented a lot lately.  In the last few days I have seen a lot of attempts in the logs of my DNN sites.  None of them have been successful by the way, this is because of the good design of the DNN modules and architecture (I'm only using the native modules in DNN).  These attempts are also DNN specific by the way.

The text that is being attempted during the SQL injection attack includes a call to a file called "ngg.js", don't know if this is the same you found.  But in any case, I have been using a stored procedure I found some time ago to do a global text search, like in all the text fields on all tables for a given database at once.  You can find this stored procedure in this link.  They also have a global search and replace in that site but I have not used that one.

Carlos

That's a very popular injection, and it runs a script to download a client to the system calling it that further attacks other servers.  I haven't gotten a successful injection attack in several years (that I know of...) on either DNN, ASP.NET or Classic ASP sites.  The DNN core modules are all pretty tight, I don't use many thrid party modules, the ones I've coded aren't susceptible and I've been pretty diligent in coding to avoid SQL injection opportunities.

But the important thing is:  DNN, by itself, is not vulnerable.  But there are thousands of ways an admin can make their site vulnerable.  Be vigilant, always have good backups and don't be afraid to flatten a box when you don't know what's happened.

Sorry, gotta go check backups now...

Jeff