SM
Product
Smarterstats
by Smartertools · last CVE Sep 30, 2017
17
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Smarterstats to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-14620
6.1
2%
Sep 30
SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting
Affected: 11.3.6347
CVE-2011-4752
–
2%
Dec 16
SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an…
Affected: 6.2.4100
CVE-2011-4751
–
1%
Dec 16
SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier…
Affected: 6.2.4100
CVE-2011-4750
–
1%
Dec 16
Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP…
Affected: 6.2.4100
CVE-2011-2159
–
4%
May 20
The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an…
Affected: 6.0
CVE-2011-2158
–
4%
May 20
The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by…
Affected: 6.0
CVE-2011-2157
–
3%
May 20
The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate web pages containing e-mail…
Affected: 6.0
CVE-2011-2156
–
3%
May 20
The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/Defaults/, (3)…
Affected: 6.0
CVE-2011-2155
–
4%
May 20
Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier…
Affected: 6.0
CVE-2011-2154
–
3%
May 20
login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote…
Affected: 6.0
CVE-2011-2153
–
2%
May 20
Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes it easier for context-dependent…
Affected: 6.0
CVE-2011-2152
–
3%
May 20
The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Client/frmViewReports.aspx or (2)…
Affected: 6.0
CVE-2011-2151
–
3%
May 20
The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools…
Affected: 6.0
CVE-2011-2150
–
3%
May 20
The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a…
Affected: 6.0
CVE-2011-2149
–
2%
May 20
Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain parameters to (1)…
Affected: 6.0
CVE-2011-2148
–
5%
May 20
Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a leading and trailing & (ampersand)…
Affected: 6.0
CVE-2010-3425
–
1%
Sep 16
Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject…
Affected: 5.3; 5.3.3819
Showing 17