CVE-2006-6232

ALTO 7.5CVE-2006-6232 · Published 02/12/2006 · updated 16/06/2026

Em resumo

CVE-2006-6232 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta dreamaccount (dreamcost).
Chance de exploração nos próximos 30 dias (EPSS): 3.3%, maior que 88.4% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
dreamaccount dreamcost	`= 3.1`	No fix yet

Description

PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.

References

secunia.com/advisories/20468 · Vendor Advisory
securityreason.com/securityalert/1949
osvdb.org/27597 · Vendor Advisory
securityfocus.com/archive/1/438169/100/100/threaded
securityfocus.com/bid/18579 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/27402

Mais vulnerabilidades de dreamaccount

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free