Server Permissions and Frontpage Upload

[Guest]

My company has multiple domains hosted on one server. Recently our server
administrator upgraded us to Windows server 2000 with IIS 5.0. I asked them
to give write permissions to a subfolder in one of my domains so that I could
later create an area for selected people to upload data.

After much trouble he finally told me it was done.

I never used this feature, nor did I link to the folder in any way.

Now our server has been hacked and he is telling me that someone uploaded a
file to domain "B" and executed it, because of the write permissions on the
subfolder in domain "A"

I am almost certain I am getting hosed here because he keeps mentioning
"billable time" if it is a result of something I did or requested.

Does this expanaition even come into the the realm of possible? Or is it
simply someone trying to cover his own mistakes?

Thanks in advance.

 

[Guest]

To clarify, I was going to be using Frontpage to create an upload page to use
with the above mentioned folder.