CVE-2008-4134 PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a U...
HighCVSS 7.5
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phprealty | <= 0.03 | No fix listed |
| phprealty | = 0.021 | No fix listed |
| phprealty | = 0.022 | No fix listed |
| phprealty | = 0.023 | No fix listed |
References
- php-realty.com
- 31874 third-party-advisory
- 4277 third-party-advisory
- 31213 vdb-entry
- ADV-2008-2611 vdb-entry
- phprealty-view-file-include(45181) vdb-entry
- 6473 exploit