FreePBX Administration GUI is Vulnerable to Authenticated Command Injection

FreePBX Endpoint Manager allows authenticated users to inject commands through the SSH connection test feature, potentially giving them control of the system. This is dangerous because an insider or compromised account could take over the entire phone system.

The testconnection function in the filestore module fails to properly sanitize user input before passing it to shell commands (CWE-78). An authenticated attacker with access to the Administrative GUI can inject arbitrary OS commands via the check_ssh_connect() function, executing them as the asterisk user. This requires valid credentials but allows unauthenticated remote code execution on the underlying system.