Webutler Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Webutler version 3.2, allowing authenticated administrators to upload PHP files that can execute system commands. Exploitation involves uploading a PHAR file containing embedded commands to the media browser, which can then be executed by accessing the uploaded file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server.

Reproduction

To reproduce this vulnerability, log in as an administrator and navigate to the media browser. Upload a PHAR file named 'poc.phar' containing a PHP payload that executes a system command, such as 'cat /etc/passwd'. After uploading, access the 'poc.phar' file to execute the embedded command.