“The attackers reportedly exploited outdated PHP code and deprecated MySQL functions in 4chan’s backend, particularly in a core script named yotsuba.php, which manages post submissions and moderation.”
4chan ran outdated PHP with known holes and deprecated MySQL functions. Attackers took it offline for about ten days and leaked moderator emails and source code. The site that never updated finally paid for it.