3 matches found
CVE-2009-4082: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in forums/ForumInclude/index.php in Outreach Project Tool OPT 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMpath parameter...
CVE-2003-1353: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Outreach Project Tool OPT 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field...
CVE-2006-4239: Undefined Security Weakness
PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool OPT Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMinc parameter...