Description
Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
References
- 20011002 results of semi-automatic source code audit mailing-list
- 3391 vdb-entry
- php-includedir-code-execution(7215) vdb-entry