PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter.
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/54379 | vdb entry |
http://www.exploit-db.com/exploits/10218 | exploit |
http://www.securityfocus.com/bid/37090 | vdb entry |
http://osvdb.org/60464 | vdb entry |
http://packetstormsecurity.org/0911-exploits/opt-rfi.txt | exploit |
http://secunia.com/advisories/37447 | third party advisory vendor advisory |