Full title: Migrating Elastix 2.5 Remote Code Execute 0day Exploit 
Category: remote exploits
Platform: linux
Migrating Elastix 2.5 suffers from an authenticated arbitrary command execution vulnerability. The issue is caused due to the improper verification of uploaded files.
 This can be exploited to execute arbitrary code by creating or uploading a malicious script file. Vulnerability tested on CentOS 7, No patches now.

# 0day.today @ http://0day.today/