CVEvulnerability
CVE-2011-4751
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-12-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.
Affected configurations
• smartertools smarterstats 6.2.4100
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html xss.cx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72203 exchange.xforce.ibmcloud.com
- http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html xss.cx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72203 exchange.xforce.ibmcloud.com