My friend opened this handmade aquarium blog recently and told me some strangers connected to his admin panel and he doesn't understand how it is possible.. I'm asking you to get the answer!

http://aquaworld.sharkyctf.xyz/

Hint: WTF this PYTHON version is deprecated!!!