CVE-2006-2686

CVE-2006-2686 affects ActionApps 2.8.1 and enables PHP remote file inclusion via the GLOBALS[AA_INC_PATH] parameter across multiple scripts (cached.php3, cron.php3, discussion.php3, filldisc.php3, filler.php3, fillform.php3, go.php3, hiercons.php3, jsview.php3, live_checkbox.php3, offline.php3, p...