CVE-2007-4834

Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1)…

published September 12, 2007

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
59%
Percentile
99.1
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2) p_ins.php, and (3) u_ins.php in manager/admin/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.58504 · 99.1th percentile
Published
2007-09-12T19:00Z
EPSS history
Timeline
  • 12 SEP 19:00Z
    Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1)…
    cvelistv5