CVE-2010-2341: PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblo...

Security readout for executives and security teams

CVE-2010-2341 affects EZPX Photoblog 1.2 beta. A vulnerable comment form file can include PHP from a remote URL supplied through tpl_base_dir, which could let an attacker run server-side code if the application is exposed. Exposure is most likely limited to legacy EZPX Photoblog 1.2 beta deployments, especially internet-facing sites that still serve the vulnerable public comment form path. The source bundle does not provide CPEs or broader version ranges. Prioritize remediation if any internet-facing EZPX Photoblog instance exists. The product appears old, and public exploit references increase risk even without confirmed active exploitation. Mitigation focus: Identify any EZPX Photoblog 1.2 beta deployments or archived copies.; Check vendor or maintainer guidance for a fixed release or official remediation.; Remove or restrict public access to vulnerable deployments until remediated..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.