Oh, I lied. It's not an issue for public/customer access, since you need level 10 access to do it! :)

Still, best to remove the script or update!

adam.

Sent from Mailbird

On 04/05/2016 13:38:02, Adam Armstrong <adama@memetic.org> wrote:

Hi Guys,

There's an authenticated remote execution issue with an old unused script, netcmd.php.

You should either SVN up to have it automatically removed (we've not used it for a long time, but no one removed it!), or you can manually remove it if you're running CE.

Thanks,
adam.

Sent from Mailbird