Privilege escalation via configuration eval injection

Eval injection in Znuny allows local users with configuration-file write access to execute commands when backup.pl runs. backup.pl consumes attacker-controlled configuration directives and evaluates them as code, but Znuny has not published the exact directive or evaluation call. Exploitation requires later execution of backup.pl by root or another privileged account, granting the command privileges of that account.