5
CVSSv2

CVE-2006-0440

Published: 26/01/2006 Updated: 19/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Text Rider 2.4 allows malicious users to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password (possibly via another vulnerability that reads it from a data file), then including the hash in a cookie.

Vulnerable Product Search on Vulmon Subscribe to Product

text rider text rider 2.4