well was wondering can anyone give me solution to Challenge 1 " The French Connection"

1. What vulnerability did the attacker exploit to compromise the web server?
2. What did the attacker do to try to obfuscate tracking?

thnx