CVE-2006-4745: Scarybear Pocketexpense Pro

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header.

Affected products

• Scarybear Pocketexpense Pro: version 3.9.1 only

Published 2006-09-13. Last modified 2026-06-16.