CVE-2006-1201

CVE-2006-1201 describes a directory traversal vulnerability in eschew.net phpBannerExchange versions 2.0 and earlier, and other versions before 2.0 Update 5. This flaw allows remote attackers to read arbitrary files by manipulating the 'email' parameter during a password recovery operation. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, potentially leading to unauthorized information disclosure. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.