Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.Referenceshttps://www.twcert.org.tw/tw/cp-132-4625-4ccc6-1.html