Looks as you have LizaMoon
http://en.wikipedia.org/wiki/LizaMoon http://norman.com/security_center/security_center_archive/2011/sql_injection_reaches_pandemic_proportions/en-us http://community.websense.com/blogs/securitylabs/archive/2011/03/29/lizamoon-mass-injection-28000-urls-including-itunes.aspx http://community.websense.com/blogs/securitylabs/archive/2011/03/31/update-on-lizamoon-mass-injection.aspx