CVE-2006-0439 | BDVDB-2026-14835 Detail

Description#

Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securitytracker.com/id?1015533
http://www.vupen.com/english/advisories/2006/0321
https://exchange.xforce.ibmcloud.com/vulnerabilities/24279
http://evuln.com/vulns/46/summary.html
http://secunia.com/advisories/18605
http://www.securityfocus.com/archive/1/423130/100/0/threaded

Exploit#

No public exploit known

History#

Version 12006-01-26Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.