CVE-2006-2881

DreamAccount 3.1 and earlier are affected by multiple PHP remote file inclusion vulnerabilities. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL to the da_path parameter in one of three scripts: auth.cookie.inc.php, auth.header.inc.php, or a...