General Cases
People hacking web sites are usually, though not always, using old and well known security vulnerabilities.
Often times scripts are used to exploit problems, thus allowing a lower level of “hacker” to compromise the server.
Generally sites are vandalized, and occasionally information is stolen, but effects are usually localized.