7.5
CVSSv2

CVE-2006-4239

Published: 21/08/2006 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max 1.2.6 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the CRM_inc parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

outreach project tool opt max

Exploits

/* +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + - - - [DEVIL TEAM THE BEST POLISH TEAM] - - + +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + - OPT (Outreach Project Tool) <= 126 [CRM_inc] Remote File Include Vulnerabilities + +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + - [Script name: OPT (Outreach Project Tool) v 126 ...