ALCASAR before 3.6.1 allows still_connected.php remote code execution.Referenceshttps://adullact.net/frs/download.php/file/8930/CHANGELOG.mdhttps://alcasar.net/download