Unrated severityNVD Advisory· Published Jun 7, 2006· Updated Jun 16, 2026
CVE-2006-2881
CVE-2006-2881
Description
Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the da_path parameter in the (1) auth.cookie.inc.php, (2) auth.header.inc.php, or (3) auth.sessions.inc.php scripts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:dreamcost:dreamaccount:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dreamcost:dreamaccount:*:*:*:*:*:*:*:*range: <=3.1
- (no CPE)range: <=3.1
Patches
Vulnerability mechanics
References
13- secunia.com/advisories/20468nvdVendor Advisory
- securityreason.com/securityalert/1062nvd
- securitytracker.com/idnvd
- www.majorsecurity.de/advisory/major_rls8.txtnvd
- www.osvdb.org/26168nvd
- www.osvdb.org/26169nvd
- www.osvdb.org/26170nvd
- www.securityfocus.com/archive/1/435991/100/0/threadednvd
- www.securityfocus.com/archive/1/436134/100/0/threadednvd
- www.securityfocus.com/bid/18278nvd
- www.vupen.com/english/advisories/2006/2152nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26932nvd
- www.exploit-db.com/exploits/1881nvd
News mentions
0No linked articles in our index yet.