First, through a zero-day SQL injection vulnerability in the wiki application ... Using a previously acquired service account ...