CVE:CVE-2006-2962
CNNVD:CNNVD-200606-219
Emergenices Personnel Information System (Empris) 20020923及更早版本的sql_fcnsOLD.php中存在PHP远程文件包含漏洞，远程攻击者可通过phormationdir参数中的URL执行任意PHP代码。
solution:Upgrade oxfam_australia emergencies_personnel_information_system to a higher version than 2002-09-23,and avoid the version (,2002-09-23]