Smarterstats
Approved changes feed: RSS · Atom
cpe:2.3:a:smartertools:smarterstats:6.2.4100:*:*:*:*:*:*:*
part: a version: 6.2.4100 update: *
| Vendor | Smartertools (5a59b173-735b-5182-b3c4-983b33290a1b) |
|---|---|
| Product | Smarterstats (c91137bf-2d6e-5d3b-9479-b3344773bc18) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-4752 |
vulnerable | 2026-06-08 04:59:32.917854 |
Details available
SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving frmCustomReport.aspx and certain other files. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.
Published: 2011-12-16T11:00:00.000Z
Updated: 2024-08-07T00:16:34.490Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4751 |
vulnerable | 2026-06-08 04:59:32.917561 |
Details available
SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.
Published: 2011-12-16T11:00:00.000Z
Updated: 2024-08-07T00:16:34.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4750 |
vulnerable | 2026-06-08 04:59:32.917182 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Default.aspx and certain other files.
Published: 2011-12-16T11:00:00.000Z
Updated: 2024-09-16T18:43:43.868Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.