A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the (1) folder (2) filename and (3) newfilename variables in app\\edit\\filerename.php.