A friend discovered a bunch of spam files in his web directory on his web host the other day. He has no idea where they came from, and I'm not quite sure either.
What are common security breaches that would allow this sort of thing to happen?
Mostly what I can think of is if someone has figured out the FTP password somehow, or if there is a form where you can upload files and this can be exploited somehow. Anyways, would appreciate some pointers on what to look for and ways to prevent this from happening.
They are using Surftown as a webhost. Think it is a shared webhost, and they seem to be running PHP 5.2 from what I can read. The site is pretty much just DreamWeaver generated HTML though, so there is no CMS like Drupal or WordPress installed. Don't know much more at the moment, but I'm mostly looking for general clues about this sort of security breach.