CVE-2006-1201: Eschew.net Phpbannerexchange

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions before 2.0 Update 5, allows remote attackers to read arbitrary files via a .. (dot dot) in the email parameter during a "Recover password" operation (recoverpw.php).

Affected products

• Eschew.net Phpbannerexchange: version 2.0 only; version 2.0_update_1 only; version 2.0_update_2 only; version 2.0_update_3 only; version 2.0_update_4 only

Published 2006-03-14. Last modified 2026-06-16.