Dreamaccount

dreamaccount

Vendor: Dreamcost • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2006-6232

1Dreamcost

1Dreamaccount

Apr 23, 2026

Dec 2, 2006

N/A· v4

N/A· v3

7.5 HIGH· v2

PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.

CVE-2006-2881

1Dreamcost

1Dreamaccount

Apr 16, 2026

Jun 7, 2006

N/A· v4

N/A· v3

5.1 MEDIUM· v2

Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the da_path parameter in the (1) aut...Show more