I stumbled upon a case where several database entries were updated. And the update is rather unusual.
For example if I have an entry named:
The updated version is:
WF_SQL_XSRF.html file is not in the server, nor it was from internal people.
I did google and only a single Korean forum mentioned this and said "Watch your security." But I didn't find a single relevant documentation about this
WF_SQL_XSRF thing. I know that the word XSRF is not a good sign already, but I just want to know what tool this might come from and is it common to have one.
I also find several other unattended website that has this line: