I have website in PHP/MYSQL developing using CakePHP framework. Recently it was hacked and someone was able to upload some PHP and JS files and the site was down. The website FTP, control panel etc were all secured. So I am wondering if someone can help that how that person would have been able to do this so that I can have it fixed. It is very critical for me to plugh this asap. Please help.
migrated from stackoverflow.com Jun 17 '11 at 13:46
Either your FTP wasn't secured like you thought, or you have a upload script somewhere that has a vulnerability, or you have used some third-party code that is malicious.
Here are some examples...