CVE-2009-4082: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in forums/ForumInclude/index.php in Outreach Project Tool OPT 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMpath parameter...