VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Nov 29, 2009· Updated Apr 23, 2026

CVE-2009-4082

CVE-2009-4082

Description

PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter.

Affected products

18
  • Lanifex/Outreach Project Tool18 versions
    cpe:2.3:a:lanifex:outreach_project_tool:*:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:lanifex:outreach_project_tool:*:*:*:*:*:*:*:*range: <=1.2.7
    • cpe:2.3:a:lanifex:outreach_project_tool:0.933:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.934:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.935:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.936:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.937:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.938:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.939:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.941:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.942:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.943:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.944:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.945:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.946:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.947:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.948:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:0.94:beta:*:*:*:*:*:*
    • cpe:2.3:a:lanifex:outreach_project_tool:1.2.6:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.