medium5.0
CVE-2006-1201
Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions before 2.0 Update 5, allows remote attacke…
Impact
Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions before 2.0 Update 5, allows remote attackers to read arbitrary files via a .. (dot dot) in the email parameter during a "Recover password" operation (recoverpw.php).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eschew.Net | Phpbannerexchange | Versions 2.0, 2.0_update_1, 2.0_update_2, 2.0_update_3, 2.0_update_4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0879.html
- http://secunia.com/advisories/19127
- http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php
- http://www.h4cky0u.org/advisories/HYSA-2006-004-phpbanner.txt
- http://www.osvdb.org/23720
- http://www.securityfocus.com/archive/1/426940/100/0/threaded
- http://www.securityfocus.com/bid/16996
- http://www.vupen.com/english/advisories/2006/0869
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25071
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25080
- http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0879.html
- http://secunia.com/advisories/19127
- http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php
- http://www.h4cky0u.org/advisories/HYSA-2006-004-phpbanner.txt
- http://www.osvdb.org/23720
- http://www.securityfocus.com/archive/1/426940/100/0/threaded
- http://www.securityfocus.com/bid/16996
- http://www.vupen.com/english/advisories/2006/0869
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25071
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25080