CVE-2006-1201

CVE-2006-1201 affects eschew.net phpBannerExchange 2.0 and earlier (and other versions before 2.0 Update 5). The root cause is a template class that fails to sanitize user input used in PHP include(), enabling local file inclusion via an email parameter in recoverpw.php and resulting in a directo...

CVE-2006-3012

The CVE-2006-3012 entry concerns phpBannerExchange prior to 2.0 Update 6, with SQL injection via user-supplied input in client/stats.php and admin/stats.php (login) or client/stats.php (pass). The root cause is unsanitized input used to construct SQL queries, allowing remote attackers to alter qu...

CVE-2006-3013

The CVE-2006-3013 issue affects phpBannerExchange (pre-2.0 Update 6 / RC5) where resetpw.php validates email with eregi. A NULL byte (%00) in the email parameter bypasses the regex, allowing SQL injection via a crafted email, enabling password resets and access to user accounts. Proof-of-concept ...