CVE:CVE-2009-4082
CNNVD:CNNVD-200911-275
Outreach Project Tool (OPT) 1.2.7及之前版本的forums/Forum_Include/index.php中存在PHP远程文件包含漏洞。远程攻击者可以借助CRM_path参数中的URL，执行任意的PHP代码。
solution:Upgrade lanifex outreach_project_tool to a higher version than 1.2.7,0.94:beta,0.933:beta,0.934:beta,0.935:beta,0.936:beta,0.937:beta,0.938:beta,0.939:beta,0.941:beta,0.942:beta,0.943:beta,0.944:beta,0.945:beta,0.946:beta,0.947:beta,0.948:beta,1.2.6,and avoid the version (,1.2.7],0.94:beta,0.933:beta,0.934:beta,0.935:beta,0.936:beta,0.937:beta,0.938:beta,0.939:beta,0.941:beta,0.942:beta,0.943:beta,0.944:beta,0.945:beta,0.946:beta,0.947:beta,0.948:beta,1.2.6