WebTareas File Upload Vulnerability Leading to Authenticated Remote Code Execution

A file upload vulnerability allowing authenticated users to upload malicious PHP files has been identified in WebTareas version 2.4. This vulnerability arises from the chat photo upload feature, where uploaded files are stored in the '/files/Messages/' directory. Once the PHP files are uploaded, they can be executed directly via the generated file path, leading to arbitrary code execution on the server.

Impact

Exploitation of this vulnerability allows for authenticated remote code execution on the server where WebTareas is hosted.

Reproduction

To reproduce this vulnerability, an authenticated user can upload a PHP file containing arbitrary code through the chat photo upload functionality. The uploaded file will be saved in the '/files/Messages/' directory. After the upload, the file can be accessed via its generated file path, executing the contained code on the server.