Unrated severityNVD Advisory· Published Mar 14, 2006· Updated Apr 16, 2026
CVE-2006-1201
CVE-2006-1201
Description
Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions before 2.0 Update 5, allows remote attackers to read arbitrary files via a .. (dot dot) in the email parameter during a "Recover password" operation (recoverpw.php).
Affected products
5cpe:2.3:a:eschew.net:phpbannerexchange:2.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:eschew.net:phpbannerexchange:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_1:*:*:*:*:*:*:*
- cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_2:*:*:*:*:*:*:*
- cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_3:*:*:*:*:*:*:*
- cpe:2.3:a:eschew.net:phpbannerexchange:2.0_update_4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- www.h4cky0u.org/advisories/HYSA-2006-004-phpbanner.txtnvdExploitVendor Advisory
- secunia.com/advisories/19127nvdVendor Advisory
- archives.neohapsis.com/archives/fulldisclosure/2006-02/0879.htmlnvd
- www.eschew.net/scripts/phpbe/2.0/releasenotes.phpnvd
- www.osvdb.org/23720nvd
- www.securityfocus.com/archive/1/426940/100/0/threadednvd
- www.securityfocus.com/bid/16996nvd
- www.vupen.com/english/advisories/2006/0869nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25071nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25080nvd
News mentions
0No linked articles in our index yet.