We are excited to announce that the IIS.NET Forums are moving to the new Microsoft Q&A experience. Learn more >

View Complete Thread
  • Re: Anyone know about www.nihaorr1.com/1.js?

    Apr 21, 2008 02:07 PM|MisterZimbu|LINK

    One of my clients has been affected by this exploit, but with some notable differences:

    • Only a few tables in the database were touched, and I can't seem to find a commonality between them (which goes against what the script that was posted earlier was showing).
    • I can't find any evidence of attempts at an injection attack or a successful one in the IIS logs.

    Has anyone who's been affected by this seen any other ways that the attacker could have possibly gotten through besides probing for vulnerabilities in the querystring?