GCVE - cpe:2.3:a:text_rider:text_rider:2.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:text_rider:text_rider:2.4:*:*:*:*:*:*:*

part: a version: 2.4 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0440`	vulnerable	2026-06-08 04:48:53.884388	Details available Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password (possibly via another vulnerability that reads it from a data file), then including the hash in a cookie. Published: 2006-01-26T22:00:00.000Z Updated: 2024-08-07T16:34:14.646Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015533 http://evuln.com/vulns/46/summary.html http://www.securityfocus.com/archive/1/423130/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0439`	vulnerable	2026-06-08 04:48:53.884005	Details available Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt. Published: 2006-01-26T22:00:00.000Z Updated: 2024-08-07T16:34:14.836Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015533 http://www.vupen.com/english/advisories/2006/0321 https://exchange.xforce.ibmcloud.com/vulnerabilities/24279 http://evuln.com/vulns/46/summary.html http://secunia.com/advisories/18605	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.