< 3.6.1
3.6.1
ALCASAR before 3.6.1 allows still_connected.php remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.