Slashdot Mirror

Nice troll attempt, but that vuln was across all browsers and was patched years ago. http://blog.unmaskparasites.com/2009/01/14/gogo2me-hidden-iframe-injection/

Thanks for sharing this story.

Did you find and save that 7_22-5.class.php file? It would be interesting to see what exactly they tried to achieve.
You can post the code (if it's short and not outright malicious) here or contact me directly using this form
http://www.unmaskparasites.com/contact/

Thanks,
Denis

The obvious Google search (gumblar.cn) leads to a page with lots of info:

http://blog.unmaskparasites.com/2009/05/07/gumblar-cn-exploit-12-facts-about-this-injected-script/