Apparently some mouth breathers allowed PDF upload so someone just executed some kind of 2000's tier buffer overflow attack.

Now the source code was duped, the code was apparently impressively bad.zero fucks given server architecture