PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via a URL in the INC_DIR parameter.Referenceshttps://www.exploit-db.com/exploits/7743http://www.securityfocus.com/bid/33227