Suite CRM version 7.14.2 allows including local php files. This is possible because the application is vulnerable to LFI.