index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter.
NVD-CWE-Other