It looks like I need some hints for user here. I’ve got access to the admin panel and see the connection between that and an u****d function in the user panel.
I’ve read a few writeups on exploiting this and got the box to “call back” to me. However, I have little success in getting it to reveal more, even after trying variations of that technique. Nudges are definitely welcome!