FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection