ORIGINAL RESEARCH DESTINATION
FusionPBX through 4.5.10
Authenticated PHP editor code execution
The original research documents how an authenticated user can use FusionPBX’s PHP editor to alter an existing server-side page. Visiting the altered page executes the inserted code with the web server’s permissions.
The original site linked this entry to an external publication. The source below contains the research or proof of concept.
Published on github.com.