CVE-2009-3966

CVE-2009-3966 affects Arcade Trade Script 1.0. The issue allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true, enabling privilege elevation. Root cause is a cookie-based auth bypass in the login/auth flow; there is no document...

CVE-2009-2289

CVE-2009-2289 is an XSS vulnerability in Arcade Trade Script 1.0 beta, impacting index.php where the q parameter in a gamelist action can be exploited to inject arbitrary script/HTML. The issue is documented in multiple sources (e.g., NVD entry) and arises from insufficient input sanitization in ...