Vulnerabilities > Arcadetradescript

DATE CVE VULNERABILITY TITLE RISK
2009-11-18 CVE-2009-3966 Improper Authentication vulnerability in Arcadetradescript Arcade Trade Script 1.0
Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true.
network
low complexity
arcadetradescript CWE-287
7.5
2009-07-01 CVE-2009-2289 Cross-Site Scripting vulnerability in Arcadetradescript Arcade Trade Script 1.0Beta
Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q parameter in a gamelist action.
4.3