CVE-2009-4082: PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1....

Security readout for executives and security teams

CVE-2009-4082 affects Outreach Project Tool (OPT) 1.2.7 and earlier. A remote attacker could abuse a file-inclusion flaw to make the server run attacker-supplied PHP code. For any still-running OPT deployment exposed to the internet, this is a serious server-compromise risk. Exposure is likely limited to legacy deployments of Outreach Project Tool 1.2.7 or earlier, especially internet-facing PHP installations. Organizations not running OPT are not affected based on the supplied evidence. Treat as high priority only if OPT is still deployed. The product and vulnerability are old, but exposed legacy systems could allow full server compromise. If no OPT exists in the environment, no action beyond documentation is needed. Mitigation focus: Identify and decommission any OPT 1.2.7 or earlier instances where possible.; Check vendor or maintainer guidance for any supported upgrade or patch path.; Restrict network access to OPT if immediate removal is not possible..

Prepared

Jun 28, 2026, 13:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.