CVE-2009-0495: IT747 Realtor 747

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via a URL in the INC_DIR parameter.

Affected products

• IT747 Realtor 747: version 4.11 only

Published 2009-02-10. Last modified 2026-06-16.