takeupcode.com
238: Filesystem: Recent WordPress Attack Lets Editors Take Over.
This is a real example of how the filesystem can be used to take over a Wordpress website.