The admin password has been changed and it's not possible to login in now. I feel that this is pure vandalism, especially on an open source demo project.
I've fixed it for now. Yeah sorry for that, but thanks to this I implemented small protection for new file upload changes. If people messed up with password they will try to mess with .php files upload and so on - that was nice lesson.