Hold on!

Warning: this link might be unsafe, please double check the link before you proceed.

https://isc.sans.edu/forums/diary/Santy+worm+defaces+websites+using+php+bug/399/