CVE-2006-1201

CVE-2006-1201 affects eschew.net phpBannerExchange 2.0 and earlier (and other versions before 2.0 Update 5). The root cause is a template class that fails to sanitize user input used in PHP include(), enabling local file inclusion via an email parameter in recoverpw.php and resulting in a directo...

CVE-2006-1201

Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions before 2.0 Update 5, allows remote attackers to read arbitrary files via a .. dot dot in the email parameter during a "Recover password" operation recoverpw.php...

phpBannerExchange 2.0 Directory Traversal Vulnerability

------------------------------------------------------ HYSA-2006-004 h4cky0u.org Advisory 013 ------------------------------------------------------ Date - Tue Mar 07 2006 TITLE: ====== phpBannerExchange 2.0 Directory Traversal Vulnerability SEVERITY: ========= High SOFTWARE: =========...