doing the usual today... finding more exploits.
had a machine that was clean yesterday show up with 2 scripts inserted through an unknown exploit while I slept, so, more digging through logfiles for that one.
I suspect the script is some gallery script that they run that was grabbed off some site floating around the internet.
Saw an interesting hit in the logs last night -- a site that I never developed is actually getting google traffic based on the template that I put up just to see how it would look. I guess I had better get back to work on that.