That's very possibly the vector.<p>If you can place a .php file in the plugins directory located here: <a href="http://www.techcrunch.com/plugins/" rel="nofollow">http://www.techcrunch.com/plugins/</a><p>And then if you call the script as per your example, then it appears that plugin is loaded (and evaluated).<p>Someone else more versed in PHP might want to cast their eyes over the wordpress plugin to see whether I'm right:
<a href="http://wordpress.org/extend/plugins/wp-super-cache/" rel="nofollow">http://wordpress.org/extend/plugins/wp-super-cache/</a><p>But it appears it's a case of globals not being checked prior to use:
<a href="http://php.net/manual/en/security.globals.php" rel="nofollow">http://php.net/manual/en/security.globals.php</a><p>So at first glance and with limited info... it's a plugin. Not that this surprises me, I still use vBulletin and I spend a lot of time code-reading the plugins for that before I use them. Mostly to make sure they don't do silly things like have SQL inside a loop over potentially lots of items, but also for the obvious security holes.<p>register_globals is an old one though, should be disabled:
<a href="http://drupal.org/node/222343" rel="nofollow">http://drupal.org/node/222343</a>