KaiYuanTong ECT Platform Command Injection Vulnerability in HTTP POST Request Handler

A critical command injection vulnerability has been identified in KaiYuanTong ECT Platform versions through 2.0.0. The issue resides in the file '/public/server/runCode.php', within the HTTP POST Request Handler component. The vulnerability allows remote attackers to inject commands by manipulating the 'code' argument, exploiting improper handling of input that could alter command execution.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the server where KaiYuanTong ECT Platform is installed.

Reproduction

To reproduce this vulnerability, send an HTTP POST request to the '/public/server/runCode.php' endpoint. Include a 'code' argument with a payload that exploits the command injection flaw. The vulnerability can be identified by searching for the 'runCode.php' file using Google Hacking techniques.