Opencats <= 0.9.4 fails to properly validade file upload, leading to remote code execution.
If your installed version is <= 0.9.4, apply the patch asap.
./RevCAT.sh <target URL>
Note: <target URL> must point to the root path where OpenCATS is installed.