facedev.net

blog

rssjson
How I got Code Execution on the server behind my classes

or, how a `sort` parameter turned into a Manager account and eventually RCE