high7.5Public exploit code
CVE-2010-2933
SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the ava_code cookie to the "main page," rel…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AV Arcade 3 - Cookie Authentication Bypass2010-07-28 · webapps · php
Impact
SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the ava_code cookie to the "main page," related to index.php and the login task.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avscripts | Av Arcade | Version 3 |