Ref: MILW0RM:3729 Researcher: Omni Verified by a CVE analyst using source inspection. Post mentions "index.php" but the relevant lines are in categories.php. The lines quoted by the researcher are the first executable lines in the file. - Steve