EUVD-2006-6215

Malware in sbrugna...

CVE-2006-6232

PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-6232

CVE-2006-6232 describes a PHP remote file inclusion vulnerability in DreamAccount 3.1, affecting admin/index.php via a URL in the path parameter. The underlying issue is a RFI in the path handling, allowing an attacker to execute arbitrary PHP code on the server. Documented impact is partial conf...

DreamAccount <= 3.1 (auth.api.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================== DreamAccount = 3.1 auth.api.php Remote File Include Exploit ============================================================== !/usr/bin/perl use HTTP::Request; use LWP::UserAgent;...

DreamAccount 3.1 - 'auth.api.php' Remote File Inclusion

!/usr/bin/perl use HTTP::Request; use LWP::UserAgent; ---------------------------------------------------- DREAMACCOUNT V3.1 Remote Command Execution Exploit ---------------------------------------------------- Discovered By CrAshoVeRrIdEArabian Security Team Coded By Drago84Exclusive Security Te...

CVE-2006-2881

Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dapath parameter in the 1 auth.cookie.inc.php, 2 auth.header.inc.php, or 3 auth.sessions.inc.php scripts...