Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.