CVE-2008-4134: Phprealty

High severity, CVSS 7.5. EPSS: 7.7% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter.

Affected products

• Phprealty Phprealty: up to and including 0.03; version 0.021 only; version 0.022 only; version 0.023 only

Published 2008-09-19. Last modified 2026-06-16.