Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
| Software | From | Fixed in |
|---|---|---|
| emergenices_personnel_information_system / empris | 2001-08-10 | 2001-08-10.x |
| emergenices_personnel_information_system / empris | 2001-09-08 | 2001-09-08.x |
| emergenices_personnel_information_system / empris | 0.4 | 0.4.x |