hello everybody

recently my site was hijacked, a couple of files have been uploaded and modified, and the only thing I can think about it, is that somehow they upload it through myalbum, as it is the only thing available to upload files in my site

my firewall haven't detected anything

is there a known bug or something for myalbum version 2.86 with xoops 2.0.14 ?

thanks for your time