5
CVE-2011-4751
- EPSS 1.16%
- Veröffentlicht 16.12.2011 11:55:11
- Zuletzt bearbeitet 16.06.2026 23:35:21
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SmarterTools ≫ Smarterstats Version6.2.4100
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.16% | 0.63 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/72203