Hello, this is not a dotnetnuke issue, it's something else. If you type http://www.dotnetnukeskin.com/default.aspx you'll get to your existing dotnetnuke site. The problem you're seeing is due to a new page called default.htm, which is your sites default document (i.e. when someone types http://www.dotnetnukeskin.com/ they go to http://www.dotnetnukeskin.com/default.htm first). Typically this type of hack has used an automated attack that looks for known webserver issues that haven't been patched, and creates a new page (usually default.htm or index.htm) to deface the site.

To fix this, remove the page, and remove default.htm from the list of default documents. Next make sure you've applied all updates (i.e. via windows update/microsoft update) to stop it happening again. Also, please check any other applications you may be running as I know that there was a recent issue with phpbb that allowed automated hacks using similar text.

Cathal

As the skin is the visual interface it is possible to develop a skin that could be a security issue, however that's reasonably unlikely. The majority of dotnetnuke skins use only static html, and the skin objects that we ship with dotnetnuke, for which there are no known issues. If skin developers have added their own active content (i.e .net code) or custom skin objects, it would be possible to introduce code that was not secure, however we've build code into the dotnetnuke core that protects against many common issues at the framework level i.e. there's code that stops most cross site scripting attacks from accessing a users cookie.

Cathal