Dreamcost Dreamaccount — known CVE vulnerabilities

Every CVE whose affected-product data names Dreamcost Dreamaccount, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2006-6232 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a…
• CVE-2006-2881 — CVSS 5.1 (medium): Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote…