Jinzora versions 2.1 and prior suffer from a remote file inclusion vulnerability in the include_path variable.