Arcadetradescript - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2009-11-18.

Products

• Arcade Trade Script - 2 CVEs

Newest CVEs of Arcadetradescript

• CVE-2009-3966 - CVSS 7.5 (high), 2009-11-18: Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true.
• CVE-2009-2289 - CVSS 4.3 (medium), 2009-07-01: Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q…