Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection
