Upgrade to version 4.2.20 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
Vendor URL: http://empserver.sourceforge.net/server.html Vendor Specific News/Changelog Entry: http://osvdb.org/ref/25/empire-CHANGES4.X