Open-Source Telephony Security

GOautodial runs an agent's logout parameter through /bin/sh

The goPhone value is escaped for SQL, then dropped into an exec() string that PHP runs through /bin/sh. Any active agent can trigger the logout call, and on a production box the injected command runs under sudo.