ATTENTENTION Webmasters - possible security vulnerability on school networks

ZInventor · #1 25-06-2009, 02:46

This post is mainly intended as a warning, but also to see if anyone else has been affected.

Our school used to run Moodle, a sort of CMS / Online class software, and recently, the school newspaper's website (which i maintain along with our robotics site) got hacked.

curiously though, the result of the hack was the addition of a div marked display:none (thankfully) that contained links to pages on a ton of moodle sites. however, when we investigated a coupple of the sites, they seemed fishy. the pages had been added maliciously to the websites, and contained no relevance to the host.

it see if your website has a similar problem, put some comments like this around your "BODY" tag:

Code:

<!--The ghost div starts IMMEDIATELY after the open body tag.-->
<body><!--end ghost spam div-->

when you render the website in a browser, right click and hit "view source" if your site has been affected, there will be a huge ghost div in between the body tag and the second comment.

try viewing the source of this page (our newspaper site)

so far, we've been lucky and haven't had the div turn visible, but want to spread the word that this is happening to see if anyone knows how to stop it.

we have tried virus-scans, spyware scans... etc... and nothing has turned up. hopefully, not many people have this kind of problem, but if you do, please post here so that we can all check out each others sites. the way i see it, the more people we have looking, the better.

if you have any ideas on how to fix this type of problem, Please post! it would be much appreciated.

-Z

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode	Rate This Thread:

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Wireless Networks(A/B/G/N)	kiettyyyy	Rules/Strategy	4	11-02-2009 15:04
Attention all Webmasters out there....	Meyer_Shuky	Website Design/Showcase	46	12-01-2004 16:53
Webmasters...its here!	blueWarrior	Website Design/Showcase	0	25-12-2003 10:10
Exchange of Picture/Ideas for Webmasters Next Year	archiver	2000	3	23-06-2002 23:21
Team Webmasters	robophent	Chit-Chat	6	06-03-2002 21:32