The Scottrader java applet provides real-time access to market quotes, news services, online ordering, and execution confirmation. Due to an unchecked password field on the server-side, an anonymous user could obtain elevated access to a customer’s private account.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36192/scottrader-1.txt
Source: https://packetstormsecurity.com/files/36192/scottrader-1.txt.html