hacked phpld directory

take a look at this site: indisar.com - it was hacked and it was running phpld. I start wondering how did they do it? Is phpld hackable or owners server was weak secured?

edit: and here is another one: jxzb.net

 

using 2.1.2 version (always say - better use 3.xx)
hacked only index.php

 

Yes that is correct only the index page has been defaced, Check this http://jxzb.net/admin/login.php
It is running on free phpLD version.

 

I believe any script is hackable -- what is a great plus to the phpLD script is that it has a large userbase and open-source, it makes it much easier to fix any bugs or security issues.

I've never had one of my phpLD directories hacked, though I've had web sites hacked once or twice.

Meti