Well I found one of my sites hacked tonight. The config.php file had been overwritten with "

Hacked by CyberLord

". What I'm trying to figure out is the extent and type of the attack. From the looks of it, it was a scripted attack. Nothing else was hit but that one, very common, file. So at first it seems like a harmless, non-personal attack.
But, the site is entirely coded by me, and there is no part of it that could lead to someone overwriting a file. For that there'd need to be some file writing mechanism or something that uses system commands, of which there are none. Now I do have WordPress installed, related to that site, but it is in a different directory. How could a script have gone from that directory to the other? And why were no other config files touched? I've got a beta version of that site setup in another directory with the exact same layout of files, but it's untouched.
One small mistake on my part is that the config.php file had 777 file permissions (rsync problem). Perhaps that has something to do with it. If the script searched for all config files and tried to overwrite them this would be the only config file it could have overwritten.

In any case, I highly suspect WordPress being the culprit. Does anyone have any info on vulnerabilities in WordPress? I installed it about a month ago. Or any info in general about what may have caused this.

Looks like he's been a busy fellow:
link
Pete

One of the Google entries said Cyberlord was here for Islam. His religion told him to hack a website? Cool...

Probably some retard 13 year old using on old hole and a tool.

if PhpBB is used, theres all sorts of bugs that let people replace index files with messages. Lots of PHP software is like that for somereason. Can't quite fathom why

Actually most of them say something about Islam... Your website must be a victim of the jihad.

ML: Thank you for the link. I stopped keeping up on BugTraq a long time ago. Too much work.

You could also press enter.

Genius!

I only use the feeling lucky button, I'm just that good.

Just asking such questions shows you don't know how lazy people can get.

I only use the im feeling lucky feature in konqueror. typing a couple words into (or sometimes a non url) the address bar goes to I'm Feeling Lucky. so it has its uses, sometimes. though that feature doesn't work all that well anymore.

I use I'm Feeling Lucky if I know which site I want to go to, but not the domain/URL of it... It just means less clicking and waiting.

Though, the only problem with IFL is if the websites' popularity changes...