He could've SQL injected the database exploiting a vulnerability, to edit peoples account data, like if they're admin or not. In one server, I played, my friend hacked into a database and gave everyone administrator. He might of also cracked the RCON password and he was able to give himself...