PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote malicious users to execute arbitrary PHP code via a URL in the tpl_base_dir parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ezpx ezpx photoblog 1.2 |