Smarterstats
Approved changes feed: RSS · Atom
cpe:2.3:a:smartertools:smarterstats:6.0:*:*:*:*:*:*:*
part: a version: 6.0 update: *
| Vendor | Smartertools (5a59b173-735b-5182-b3c4-983b33290a1b) |
|---|---|
| Product | Smarterstats (c91137bf-2d6e-5d3b-9479-b3344773bc18) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-2159 |
vulnerable | 2026-06-08 04:58:04.390164 |
Details available
The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin/Defaults/frmDefaultSiteSettings.aspx, (2) Admin/Defaults/frmServerDefaults.aspx, (3) Admin/frmReportSettings.aspx, (4) Admin/frmSite.aspx, (5) App_Themes/Default/ButtonBarIcons.xml, (6) App_Themes/Default/Skin.xml, (7) Client/frmImportSettings.aspx, (8) Client/frmSeoSettings.aspx, (9) Services/Web.config, (10) aspnet_client/system_web/4_0_30319/, (11) clientaccesspolicy.xml, (12) cloudscan.exe, (13) crossdomain.xml, or (14) sitemap.xml. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:53:16.997Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2158 |
vulnerable | 2026-06-08 04:58:04.389856 |
Details available
The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin/frmSite.aspx, (2) Admin/frmSites.aspx, (3) Admin/frmViewReports.aspx, (4) App_Themes/AboutThisFolder.txt, (5) Client/frmViewReports.aspx, (6) Temp/AboutThisFolder.txt, (7) default.aspx, (8) login.aspx, or (9) certain .jpg URIs under Temp/. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:53:17.159Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2157 |
vulnerable | 2026-06-08 04:58:04.389561 |
Details available
The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate web pages containing e-mail addresses, which allows remote attackers to obtain potentially sensitive information by reading the default values of form fields.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:53:16.861Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2156 |
vulnerable | 2026-06-08 04:58:04.389288 |
Details available
The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/Defaults/, (3) Admin/GettingStarted/, (4) Admin/Popups/, (5) App_Themes/, (6) Client/, (7) Client/Popups/, (8) Services/, (9) Temp/, (10) UserControls/, (11) UserControls/PanelBarTemplates/, (12) UserControls/Popups/, (13) aspnet_client/, or (14) aspnet_client/system_web/ directory name, or (15) certain directory names under App_Themes/Default/.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:53:16.864Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2155 |
vulnerable | 2026-06-08 04:58:04.388996 |
Details available
Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:53:16.786Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2154 |
vulnerable | 2026-06-08 04:58:04.388693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2153 |
vulnerable | 2026-06-08 04:58:04.388394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2152 |
vulnerable | 2026-06-08 04:58:04.388099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2151 |
vulnerable | 2026-06-08 04:58:04.387803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2150 |
vulnerable | 2026-06-08 04:58:04.387482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2149 |
vulnerable | 2026-06-08 04:58:04.387136 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2148 |
vulnerable | 2026-06-08 04:58:04.386728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.