Possible security exploit in /admin/modules/admindashboard/phpsysinfo/common_admin_functions.php

[jfinstrom (James Finstrom)]

Critical FreePBX RCE Vulnerability (ALL Versions) CVE-2014-7235

##Critical FreePBX RCE Vulnerability (ALL Versions) CVE: 2014-7235 Date: 2014-09-30 Author: James Finstrom Ticket: http://issues.freepbx.org/browse/FREEPBX-8070 UPDATE: Please run the commands in http://wiki.freepbx.org/display/L1/FreePBX+Security+Scan We have been made aware of a critical Zero-Day Remote Code Execution and Privilege Escalation exploit within the legacy “FreePBX ARI Framework module/Asterisk Recording Interface (ARI)”. This affects any user who has installed FreePBX pr…