Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2011-2152
HistoryMay 20, 2011 - 10:55 p.m.

CVE-2011-2152

2011-05-2022:55:05
CWE-200
mitre
web.nvd.nist.gov
34
smartertools
smarterstats
web server
remote attack
sensitive information
cross-domain
cve-2011-2152
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.004

Percentile

72.3%

JSON

The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Client/frmViewReports.aspx or (2) UserControls/Popups/frmHelp.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (a) web-server access logs or (b) web-server Referer logs, related to a “cross-domain Referer leakage” issue.

Affected configurations

Nvd
Node
smartertoolssmarterstatsMatch6.0
VendorProductVersionCPE
smartertoolssmarterstats6.0cpe:2.3:a:smartertools:smarterstats:6.0:*:*:*:*:*:*:*

Related

cvelist 1
prion 1
nvd 1
openvas 1
cvelist
cvelist
CVE-2011-2152
2011-05-20 22:00:00
prion
prion
Cross site scripting
2011-05-20 22:55:00
nvd
nvd
CVE-2011-2152
2011-05-20 22:55:05
openvas
openvas
SmarterMail Multiple Vulnerabilities (May 2011)
2011-06-01 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.004

Percentile

72.3%

JSON
Related for CVE-2011-2152
cvelist1prion1nvd1openvas1