EUVD-2006-1205

Malware in sbrugna...

CVE-2006-3013

Interpretation conflict in resetpw.php in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via an email parameter containing a null %00 character after a valid e-mail address, which passes the validation check in the eregi PHP command. NOTE: it could...

CVE-2006-3013

The CVE-2006-3013 issue affects phpBannerExchange (pre-2.0 Update 6 / RC5) where resetpw.php validates email with eregi. A NULL byte (%00) in the email parameter bypasses the regex, allowing SQL injection via a crafted email, enabling password resets and access to user accounts. Proof-of-concept ...