CVE:CVE-2010-2341
CNNVD:CNNVD-201006-336
EZPX Photoblog的system/application/views/public/commentform.php存在PHP远程文件包含漏洞，远程攻击者可以利用tpl_base_dir参数的URL执行任意PHP代码。
solution:Upgrade ezpx ezpx_photoblog to a higher version than 1.2:beta,and avoid the version 1.2:beta