Folder permissions

[c0urier]

Just a little side-node - The attack was not related to Webspell, so I have to say sorry to the developers there - But related to AmxBans 5.1.

Just saw this little awesome mails:
Subject:
Fx29Shell http://xxxx.xxxxxx.com/demos/c99bypass.php by 90.157.8.141
From:
webmaster@xxxxxx.com (virtual-user)
Date:
Thu, 4 Feb 2010 14:28:32 +0100 (CET)
To:
feelcomz@gmail.com

Boss, there was an injected target on xxxx.xxxxxx.com/demos/c99bypass.php by 90.157.8.141

So this happened after I restored and made a clean installation of everything incl. AmxBANS.

I've attached the apache access-log on AmxBans.de's forum, hopefully someone can help me understand how they found and how to prevent this vulnerability (http://www.amxbans.de/viewtopic.php?f=4&t=816).