par0xyzm is hellbanned, but this is interesting: http://gonullyourself.org/ezines/exp/exp02.txt

is hosted at Sourceforge, so they share a server with thousands of other customers. Every single customer is able to execute commands and access the other project directories. Pretty stupid, eh? You only need to find one hole in one hosted site and you can access ALL the project databases