Pentester, infosec consultant and general geek. I work at @SureCloud.
So by combining these two vulnerabilities it is possible to create an Administrator user without any prior authentication. After that, you can upload a shell as an extension and get code excecution on the server 🎉
…g there is that looking back at the time of the release of the first Star Wars prequel, The Phantom Menace, in 1999, the reviews actually weren’t that bad. In fact, many thought the film was quite good.