vendor:
Arcade Trade Script
by:
Mr.tro0oqy
8,8
CVSS
HIGH
Insecure Cookie Handling
614
CWE
Product Name: Arcade Trade Script
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: NO
Related CWE: N/A
CPE: a:arcadetradescript:arcade_trade_script:1.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln
An attacker can set the adminLoggedIn cookie to true, allowing them to bypass authentication and gain access to the admin panel.
Mitigation:
Ensure that cookies are properly validated and that authentication is enforced.
