Design/Logic Flaw

2011-05-2022:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.4%

JSON

The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

CPENameOperatorVersion
smarterstatseq6.0

CPE	Name	Operator	Version
	smarterstats	eq	6.0

References

www.kb.cert.org/vuls/id/240150

www.kb.cert.org/vuls/id/MORO-8GYQR4

xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html

xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html

exchange.xforce.ibmcloud.com/vulnerabilities/67831