The vulnerability of the “endpoint” web interface module in the IP-telephony system management software FreePBX allows a hacker to execute arbitrary code.

The vulnerability of the “endpoint” web interface module in the IP telephony system management software FreePBX is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...