Critical PHP Code Injection Vulnerability in OpenCATS Exposed

## Overview OpenCATS versions prior to commit 3002a29 are vulnerable to a critical PHP code injection flaw. This vulnerability exists in the installer AJAX endpoint, allowing unauthenticated attackers to execute arbitrary code. The exploit is weaponized and can be easily utilized by attackers. ## Technical Details The vulnerability arises from the `databaseConnectivity` action parameter in the installation process. Attackers can manipulate this parameter to inject PHP statements. By using a single quote and statement separator, they can break out of the `define()` string context in `config.php`. This allows them to insert malicious PHP code that persists across sessions. The code executes on every page load if the installation wizard is left incomplete. ## Impact The CVSS score for this vulnerability is 9.2, indicating a critical risk. Successful exploitation can lead to full system compromise. Attackers can gain control of the affected OpenCATS instance, potentially accessing sensitive data or disrupting services. Organizations using vulnerable versions should prioritize remediation to prevent unauthorized access. ## Mitigation Defenders should immediately update OpenCATS to the latest version, specifically to commit 3002a29 or later. Ensure that the installation wizard is completed properly to avoid leaving the system in a vulnerable state. Regularly audit and monitor web applications for unauthorized changes or suspicious activity to detect any potential exploitation attempts.