@DosDawg: The only thing to do in fixing this this was removing the exploit Javascript from the bottom of the page. The real question is, how did it get there? I haven't heard any reports on that as of yet.

My educated guess is that either 1) someone was able to modify Boonex.com templates due to a public vulnerability in a template/templating file (which is the better case), or 2) someone gained administrator level access to the site and did it (which is the worse case). In either case, it would see more be good to have a report on the investigation of what caused this.

If full server access was compromised, there's no telling what all was done, and what data was snatched from users and the database in general. In such case, the entire filesystem and database should also be combed through to ensure no possible backdoors have been left in.