An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory