PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/54379
http://www.securityfocus.com/bid/37090