Title : phpRealty "INC" Parameter Remote File Inclusion Vulnerability VUPEN ID : VUPEN/ADV-2008-2611 CVE ID : CVE-2008-4134 CWE ID : CWE-98
Rated as : High Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-09-18
Technical Description
A vulnerability has been identified in phpRealty, which could be exploited by remote attackers to compromise a vulnerable web server. This issue is caused by an input validation error in the "manager/static/view.php" script when processing the "INC" parameter, which could be exploited by remote attackers to include malicious PHP scripts and execute arbitrary commands with the privileges of the web server.
