lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters.Referenceshttps://github.com/gnat/nc-cms/issues/14
