Compromised D7 Sites due to SQL Injection Security Bug "Drupal Core - Highly Critical - Public Service announcement - PSA-2014-003"
Drupal SA-CORE-2014-005 - How to tell if my server / sites were compromised?