CVE-2010-2341

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tplbasedir parameter...

CVE-2010-2341

The CVE-2010-2341 entry concerns EZPX Photoblog 1.2 beta, where a PHP remote file inclusion vulnerability in system/application/views/public/commentform.php allows an attacker to execute arbitrary PHP code by supplying a URL in the tpl_base_dir parameter. The underlying issue is improper handling...