hacked alias table in SQL

Topics: General
Sep 11, 2015 at 1:27 PM
More projects in version 1.8 on MSSQL have problem.
In table [Orchard_Alias_AliasRecord] on column RouteValues inserted:
<v Id="151" /><div style="display:none">abortion dc <a href=....website-knowledge.com/page/how-can-i-terminate-my-pregnancy>website-knowledge.com</a> dealing with abortion</div>

In LOG error System.Xml.XmlException:
full log - LOG

some experience
Developer
Sep 11, 2015 at 1:58 PM
Do you have any repro steps of getting into this state?
Sep 11, 2015 at 3:38 PM
I do not have. Website run 6 month unchanged. Now white page and in LOG this error. I traced problem in table [Orchard_Alias_AliasRecord]. Inserted url
to another page. Standart instalation with PJS bootstrap theme.
Sep 14, 2015 at 7:50 AM
Edited Sep 14, 2015 at 8:10 AM
On Friday, restore the database from a backup. All right. But today again the same error.
Sep 14, 2015 at 8:17 AM
iMPORTANT
<a href=....website-knowledge.com/page/how-can-i-terminate-my-pregnancy> website-knowledge.com </a>
This is a link to a complete stranger sites.
Developer
Sep 14, 2015 at 12:46 PM
So if you did not enter that content then probably your site, database, or hosting account has been compromised. Resetting all your passwords would be the first order of business.
Sep 14, 2015 at 2:58 PM
Upgraded one website to version 1.9. But again error.
LOG
Developer
Sep 14, 2015 at 3:12 PM
Upgrading to a newer version won't correct your database contents.
Coordinator
Sep 14, 2015 at 5:03 PM
Can you contact me on sebastien.ros@microsoft.com and send me your IIS LOG for this time frame?
I will ask you more questions by email.
Sep 15, 2015 at 8:02 AM
I first made a recovery database to the state before the error, then upgrade to 1.9 Orchard second day of database hacking again.
Sep 15, 2015 at 8:33 AM
Website run on more hosting. Error occurred in one day. Yesterday reset username and password for admin website, today run still succesfully.