CVE-2001-1052: Emergenices Personnel Information System Empris

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Affected products

• Emergenices Personnel Information System Empris: version 0.4 only; version 2001-08-10 only; version 2001-09-08 only

Published 2001-10-02. Last modified 2026-06-16.