VYPR
Unrated severityNVD Advisory· Published Sep 13, 2006· Updated Jun 16, 2026

CVE-2006-4745

CVE-2006-4745

Description

ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Scarybear/Pocketexpense Prollm-fuzzy2 versions
    = 3.9.1+ 1 more
    • (no CPE)range: = 3.9.1
    • cpe:2.3:a:scarybear:pocketexpense_pro:3.9.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.