CVE-2008-4134

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter.

Link	Resource
http://php-realty.com/
http://www.securityfocus.com/bid/31213
http://securityreason.com/securityalert/4277
http://www.vupen.com/english/advisories/2008/2611
http://secunia.com/advisories/31874
https://exchange.xforce.ibmcloud.com/vulnerabilities/45181
https://www.exploit-db.com/exploits/6473

Configuration 1

cpe:2.3:a:phprealty:phprealty:0.021:*:*:*:*:*:*:* cpe:2.3:a:phprealty:phprealty:0.022:*:*:*:*:*:*:* cpe:2.3:a:phprealty:phprealty:*:*:*:*:*:*:*:* cpe:2.3:a:phprealty:phprealty:0.023:*:*:*:*:*:*:*

---

Published : 2008-09-19 05:15

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-4134

Mitre link : CVE-2008-4134

No products.

CWE-94