What kind of stuff is on the page? Forms? Database access? Does it use URL parameters? We'll need to know what's on the page to really help you out.
On Mon, Nov 15, 2010 at 8:45 PM, Mike Little <m...@nzsolutions.co.nz> wrote: > > hi guys, > > for the last few weeks one of my clients websites is being hacked. currently > hosted on a shared server at hostek. > > the index.cfm is in the root and appears to be the only templated affected. > basically they are appending a long list of url's in a hidden div to the > existing code. > > we immediately changed ftp logins and also removed any cffile functions from > the site. unfortunately within a couple of days it happened again. > > has anyone experienced this happening recenty or may know of where i should > checking for vulnerabilities? > > cheers > mike > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339265 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
