A windows server 2008 web edition that hosts some personal blogs of mine have been hacked with all my php files injected whereas the blog wasn't even active.
The password is very lengthy about 50 characters. So how did the hacker manage to do so. While searching on the internet I stumbled upon this:
http://www.argeniss.com/pressrel032408.html
"The problem discovered by Argeniss results from design issues that were not identified by Microsoft engineers during the Security Development Lifecycle (SDL), and allows accounts commonly used by Windows services (NETWORK SERVICE and LOCAL SERVICE) to bypass new Windows services protection mechanisms and elevate privileges to achieve complete control over the operating system.
The Argeniss discovery also affects Internet Information Services 7 in the default configuration, allowing ASP .NET applications to completely compromise operating system security. "
It mentions asp.net rather than php but maybe it uses something on IIS ?
How can I know and how to really secure my server then ?
Update: SQL Database is not touched, it's directly PHP code from Wordpress. What worries me is that SOME BLOGS HAVE BEEN HACKED WHEREAS THEY ARE NOT ACTIVE IN IIS7 so it doesn't come from Wordpress or mysql.