At the line right above the one I quoted: > As described above, I used the web interface to gain code execution, but at this point I still hadn't actually gain

At the line right above the one I quoted: > As described above, I used the web interface to gain code execution, but at this point I still hadn't actually gained access to the web interface as a normal user. He had code execution, there was no need for him to go any further.