Outreach Project Tool 'CRM_path' Parameter Remote File Inclusion Vulnerability

The host is running Outreach Project ToolOPT and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gboutreachprojecttoolrfivuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Outreach Project Tool 'CRMpath' Parameter Remote File Inclusion Vulnerability Authors: Antu Sanadi...

CVE-2009-4082

CVE-2009-4082 affects Outreach Project Tool (OPT) up to version 1.2.7, where the PHP remote file inclusion vulnerability resides in forums/Forum_Include/index.php via the CRM_path parameter. The underlying issue allows an attacker to execute arbitrary PHP code by supplying a crafted URL. Connecte...