CVE:CVE-2008-4134
CNNVD:CNNVD-200809-265
phpRealty是基于PHP/MYSQL的内容管理软件。
phpRealty的manager/static/view.php文件中没有正确地过滤INC参数，远程攻击者可以通过包括本地或远程资源导致执行任意代码。
solution:Upgrade phprealty phprealty to a higher version than 0.03,0.021,0.022,0.023,and avoid the version (,0.03],0.021,0.022,0.023