AnyInventory versions 1.9.1 and below suffer from a remote file inclusion vulnerability in environment.php.