CVE:CVE-2001-1052
CNNVD:CNNVD-200110-010
Empris PHP script存在漏洞。远程攻击者可以借助设置includedir变量的HTTP请求包含远程web网站的任意文件。
solution:Upgrade emergenices_personnel_information_system empris to a higher version than 0.4,2001-08-10,2001-09-08,and avoid the version 0.4,2001-08-10,2001-09-08