SQL Injection? Anyone seen this?

• STDMFGCO

  SSC Journeyman

  Points: 89

  More actions

  November 2, 2016 at 2:29 pm

  #149377

  Hello everyone!

  Found some strange code injected into a few of our website databases this morning. Never would have noticed it if it hadn't broken our google maps function. It's interesting since it almost looks like a tracking key. When I search google for that code, quite a few websites appear to have it as well. Here are the 2 variations I've found so far:

  <a href=http://<div style="display:none">wer54w66sf32re2</div><div style="display:none">wer54w66sf32re2</div> ><div style="display:none">wer54w66sf32re2</div><div style="display:none">wer54w66sf32re2</div></a>

  <div style="display:none">wer54w66sf32re2</div><div style="display:none">wer54w66sf32re2</div>

  By chance, has anyone seen this before? This seems almost like a generated key that is used for tracking sites that allow SQL injections: wer54w66sf32re2.

  Thanks for your help,

• HanShi

  SSC-Dedicated

  Points: 33519

  More actions

  November 3, 2016 at 2:21 am

  #1910290

  This same situation is described by another poster. See thread Suspect data in SQL tables.

  ** Don't mistake the ‘stupidity of the crowd’ for the ‘wisdom of the group’! **