mydatery, there are many scripts that have this same type of file. phpnuke, postnuke, e107,jamroom,and basically any other web application that has a cfg file. i think you could be correct, but the probability is unlikely. houston is correct the Iframe injection is not necessarily intended to take down a site, as much as it is to make the site owners machine a node in their network. security hardening is the responsibility of the site owner and the hosting service provider. at any rate, it wasn't see more a bad idea to discuss this, and there are many other options that we could embellish upon that could and have granted access to vulnerable websites.


Regards,
DosDawg