Remote file inclusion

PHP remote file inclusion vulnerability in forums/ForumInclude/index.php in Outreach Project Tool OPT 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMpath parameter...