SmarterTools

Smarterstats

17 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2017-14620

Exploit
  • EPSS 1.27%
  • Veröffentlicht 30.09.2017 01:29:01
  • Zuletzt bearbeitet 20.04.2025 01:37:25

SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting.

10

CVE-2011-4752

  • EPSS 1.8%
  • Veröffentlicht 16.12.2011 11:55:11
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving frmCustomReport.aspx and certain other ...

5

CVE-2011-4751

  • EPSS 0.23%
  • Veröffentlicht 16.12.2011 11:55:11
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-...

4.3

CVE-2011-4750

  • EPSS 0.23%
  • Veröffentlicht 16.12.2011 11:55:10
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Default.aspx and certain other files.

7.5

CVE-2011-2155

  • EPSS 2.66%
  • Veröffentlicht 20.05.2011 22:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattend...

10

CVE-2011-2159

  • EPSS 2.3%
  • Veröffentlicht 20.05.2011 22:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin/Defaults/frmDefaultSiteSet...

10

CVE-2011-2158

  • EPSS 2.44%
  • Veröffentlicht 20.05.2011 22:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin/frmSite.aspx, (2) A...

5

CVE-2011-2157

  • EPSS 0.77%
  • Veröffentlicht 20.05.2011 22:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate web pages containing e-mail addresses, which allows remote attackers to obtain potentially sensitive i...

5

CVE-2011-2156

  • EPSS 0.77%
  • Veröffentlicht 20.05.2011 22:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/Defaults/, (3) Admin/GettingStarted/, (4) Admin/Popups/, (5) App_Themes/, (6) Client/, (7) Client/Pop...

5

CVE-2011-2154

  • EPSS 0.86%
  • Veröffentlicht 20.05.2011 22:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script acces...