CVE-2009-3966 - Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true

HIGH

Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true

Published Nov 18, 2009

7.5

HIGH

CVSS 2.0

EPSS 2.27%

Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true.

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

Link	Providers	Tags
http://secunia.com/advisories/36448		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9482		exploitx_refsource_EXPLOIT-DB
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3937		Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 18, 2009

Updated Aug 7, 2024

Reserved Nov 18, 2009

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 18, 2009

Updated Aug 7, 2024

GitHub

No data