← Database

CVE-2010-2341

HIGH CVSS: 7.5 Published: 2010-06-18 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tpl_base_dir parameter.

Affected Platforms

Ezpx Ezpx Photoblog

Weakness Type

CWE-94

References