CVE-2006-2881

DreamAccount 3.1 and earlier are affected by multiple PHP remote file inclusion vulnerabilities. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL to the da_path parameter in one of three scripts: auth.cookie.inc.php, auth.header.inc.php, or a...

CVE-2006-2881

Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dapath parameter in the 1 auth.cookie.inc.php, 2 auth.header.inc.php, or 3 auth.sessions.inc.php scripts...