I figured out what they were trying to do today.. this exploit is almost two years old so hopefully it doesn't still work?!!?

http://securitytracker.com/alerts/2006/Aug/1016692.html