OpenCATS Remote Code Execution Vulnerability

A remote code execution vulnerability exists in OpenCATS version 0.9.4. This vulnerability allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files disguised as resume attachments. The exploitation occurs through the careers job application endpoint, where uploaded PHP payloads can be executed via POST requests to the uploaded file in the upload directory.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where OpenCATS is hosted.

Reproduction

To reproduce this vulnerability, upload a PHP file disguised as a resume attachment through the careers job application endpoint. Once the file is uploaded, execute system commands by sending POST requests to the uploaded file in the upload directory.