Unauthenticated RCE in OpenCATS via Installer Config Injection

Unauthenticated remote code execution in OpenCATS through unsanitized input in the installer AJAX endpoint, allowing PHP code injection into config.php.