CVE-2010-2341 PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tpl_base_di...
HighCVSS 7.5
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tpl_base_dir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ezpx photoblog | = 1.2-beta | No fix listed |
References
- packetstormsecurity.org exploit
- 13890 exploit
- 40881 exploit vdb-entry
- ADV-2010-1497 vdb-entry vendor-advisory
- ezpxphotoblog-commentform-file-include(59474) vdb-entry