The guys over at security.immerda.ch give a really nice narative of how one of their hosted web sites recently got hacked, and the steps they went through to identify and rectify the problem. Its really honest, and made a great read.

The attackers apparently got in with a third party gallery module for Joomla. Joomla! is a free, open source content management system written with PHP for publishing content on the world wide web.