Unscored severity · published Sep 12, 2007
CVE-2007-4834
Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2)…
–
CVSS
58.5%
EPSS
No
On KEV
Description
Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2) p_ins.php, and (3) u_ins.php in manager/admin/.
Exploitation
Is it being used?
Exploit prediction (EPSS)58.5% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phprealty · Phprealty
0.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4834
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4834
osvdb.org
http://osvdb.org/37074
osvdb.org
http://osvdb.org/37075
osvdb.org
http://osvdb.org/37076
www.securityfocus.com
http://www.securityfocus.com/bid/25610
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/36518
www.exploit-db.com
https://www.exploit-db.com/exploits/4387
More from Phprealty
–
CVE-2008-4134
PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute…