Lucene search
HistoryNov 18, 2009 - 11:30 p.m.
CVE-2009-3966
cve-2009-3966
arcade trade script
authentication bypass
remote access
adminloggedin cookie
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.7%
Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true.
Affected configurations
Node
arcadetradescriptarcade_trade_scriptMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| arcadetradescript:arcade_trade_script | arcadetradescript arcade trade script | eq | 1.0 |
Related
nvd
nvd
CVE-2009-3966
2009-11-18 23:30:00
cvelist
cvelist
CVE-2009-3966
2009-11-18 23:00:00
prion
prion
Authentication flaw
2009-11-18 23:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.7%
Related for CVE-2009-3966