CVE-2007-3643: AV Scripts AV Arcade

High severity, CVSS 10.0. EPSS: 2.2% chance of exploitation in the next 30 days.

admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows remote attackers to perform certain administrative actions.

Affected products

• AV Scripts AV Arcade: version 2.1b only

Published 2007-07-10. Last modified 2026-06-16.