Suite CRM version 7.14.2 allows including local php files. This is possible
because the application is vulnerable to LFI.