...ASP.NET technologies against recent Web-based attacks. In April attackers went after Microsoft SQL sites by injectingmalicious JavaScript onto legitimate sites. The JavaScript would direct a browser to a server hosting malicious software...
http://news.cnet.com/8301-10789_3-9976521-57.html