CVE-2009-4082 PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_pa...
HighCVSS 7.5
EPSS 3.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lanifex outreach project tool | <= 1.2.7 | No fix listed |
| lanifex outreach project tool | = 0.94-beta | No fix listed |
| lanifex outreach project tool | = 0.933-beta | No fix listed |
| lanifex outreach project tool | = 0.934-beta | No fix listed |
| lanifex outreach project tool | = 0.935-beta | No fix listed |
| lanifex outreach project tool | = 0.936-beta | No fix listed |
| lanifex outreach project tool | = 0.937-beta | No fix listed |
| lanifex outreach project tool | = 0.938-beta | No fix listed |
| lanifex outreach project tool | = 0.939-beta | No fix listed |
| lanifex outreach project tool | = 0.941-beta | No fix listed |
| lanifex outreach project tool | = 0.942-beta | No fix listed |
| lanifex outreach project tool | = 0.943-beta | No fix listed |
| lanifex outreach project tool | = 0.944-beta | No fix listed |
| lanifex outreach project tool | = 0.945-beta | No fix listed |
| lanifex outreach project tool | = 0.946-beta | No fix listed |
| lanifex outreach project tool | = 0.947-beta | No fix listed |
| lanifex outreach project tool | = 0.948-beta | No fix listed |
| lanifex outreach project tool | = 1.2.6 | No fix listed |
References
- 60464 vdb-entry
- packetstormsecurity.org exploit
- 37447 third-party-advisory vendor-advisory
- 10218 exploit
- 37090 vdb-entry
- outreach-index-file-include(54379) vdb-entry