AlberT-EasySite versions 1.0.a5 and prior suffer from a remote file inclusion vulnerability in the PSA_PATH variable.