Vulnerabilities > CVE-2006-2881 - Unspecified vulnerability in Dreamcost Dreamaccount

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
dreamcost
exploit available
NVD
Published: 2006-06-07
Updated: 2024-11-21

Summary

Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the da_path parameter in the (1) auth.cookie.inc.php, (2) auth.header.inc.php, or (3) auth.sessions.inc.php scripts.

Vulnerable Configurations

Part Description Count
Application
Dreamcost
1

Exploit-Db

descriptionDreamAccount <= 3.1 (da_path) Remote File Include Vulnerabilities. CVE-2006-2881. Webapps exploit for php platform
fileexploits/php/webapps/1881.txt
idEDB-ID:1881
last seen2016-01-31
modified2006-06-05
platformphp
port
published2006-06-05
reporterAesthetico
sourcehttps://www.exploit-db.com/download/1881/
titleDreamAccount <= 3.1 da_path Remote File Include Vulnerabilities
typewebapps

References