CVE-2009-4082

HIGH 7.5CVE-2009-4082 · Published 29/11/2009 · updated 16/06/2026

In short

CVE-2009-4082 is a HIGH (CVSS 7.5) vulnerability affecting outreach project tool (lanifex).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
outreach project tool lanifex	`= 0.933= 0.934= 0.935= 0.936= 0.937= 0.938= 0.939= 0.94= 0.941= 0.942= 0.943= 0.944= 0.945= 0.946= 0.947= 0.948= 1.2.6≤ 1.2.7`	No fix yet

Description

PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter.

References

osvdb.org/60464
packetstormsecurity.org/0911-exploits/opt-rfi.txt · Exploit
secunia.com/advisories/37447 · Vendor Advisory
exploit-db.com/exploits/10218 · Exploit
securityfocus.com/bid/37090
exchange.xforce.ibmcloud.com/vulnerabilities/54379

More vulnerabilities in outreach project tool

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free