← Database

CVE-2009-3966

HIGH CVSS: 7.5 Published: 2009-11-18 Modified: 2026-06-16

Description

Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true.

Affected Platforms

Arcadetradescript Arcade Trade Script

Weakness Type

CWE-287

References