In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution.
CWE-79