it is possible if it is a shared server, that someone else on your server allowed the script to be uploaded. I have seen this happen usually thru a form that allows file uploads.