CVE-2007-3643 admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows remote attackers to perform certain administrative actions.
HighCVSS 10.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows remote attackers to perform certain administrative actions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| av scripts av arcade | = 2.1b | No fix listed |
References
- 38952 vdb-entry
- 2871 third-party-advisory
- 20070702 AV Arcade 2.1b (COOKIE[ava_userid]) Get Admin Rights mailing-list
- 24736 vdb-entry
- avarcade-avauserid-unauthorized-access(35234) vdb-entry