Lucene search
PRIOn knowledge basePRION:CVE-2011-2153HistoryMay 20, 2011 - 10:55 p.m.
Cross site scripting
2011-05-2022:55:00
PRIOn knowledge base
www.prio-n.com
4
Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes it easier for context-dependent attackers to discover credentials by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, related to a “cross-domain Referer leakage” issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| smarterstats | eq | 6.0 |
Related
nvd
nvd
CVE-2011-2153
2011-05-20 22:55:05
cve
cve
CVE-2011-2153
2011-05-20 22:55:05
cvelist
cvelist
CVE-2011-2153
2011-05-20 22:00:00
openvas
openvas
SmarterMail Multiple Vulnerabilities (May 2011)
2011-06-01 00:00:00