CVE-2009-3966: Arcadetradescript Arcade Trade Script

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true.

Affected products

• Arcadetradescript Arcade Trade Script: version 1.0 only

Published 2009-11-18. Last modified 2026-06-16.