Possible attacks on and from websites

Iframe Attack

Solution
change permission of  php, htm, html , js and css files  to 444
If you need to edit any file, first change its permission to 655
once you completed the changes
 set the permission back to 444

also check for joomla

Bloodhound exploits  , link2