CVEvulnerability
CVE-2011-2151
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-05-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
• smartertools smarterstats 6.0
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/240150 US Government Resource
- http://www.kb.cert.org/vuls/id/MORO-8GYQR4 US Government Resource
- http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html xss.cx
- http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html xss.cx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67831 exchange.xforce.ibmcloud.com
- http://www.kb.cert.org/vuls/id/240150 US Government Resource
- http://www.kb.cert.org/vuls/id/MORO-8GYQR4 US Government Resource
- http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html xss.cx
- http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html xss.cx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67831 exchange.xforce.ibmcloud.com