Description ALCASAR before 3.6.1 allows still_connected.php remote code execution. References https://adullact.net/frs/download.php/file/8930/CHANGELOG.md https://alcasar.net/download