Yesterday my hotel was attacked, hacker's got into the database, took information & edited it.
The only thing that was in my wwwroot at the time was RevCMS.
I am using IIS 7.5.
RevCMS is one of the most secured cms's in the retros community, so i must say that someone witch you trust has leaked the pwd for your db (if your using pma)., or if your using RevCMS 3.0 beta, then yes that could happen.