PT-2011-3640

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue allows remote attackers to obtain sensitive information by exploiting a "cross-domain Referer leakage" issue. This is achieved through GET requests with query strings for specific API...

CVE-2011-2154: Exposure of Sensitive Information to an Unauthorized Actor

login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...

PT-2011-3642

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue concerns the SmarterTools SmarterStats web server, where the login.aspx page does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie. This omission make...

PT-2011-3647

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The SmarterTools SmarterStats web server may be affected by an issue where certain resources omit the Content-Type header, potentially allowing remote attackers to leverage an interpretation...

CVE-2011-2159: Undefined Security Weakness

The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving 1 Admin/Defaults/frmDefaultSiteSettings.aspx, 2...

CVE-2011-2155: Improper Authentication

Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation...

CVE-2011-2153: Exposure of Sensitive Information to an Unauthorized Actor

Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes it easier for context-dependent attackers to discover credentials by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser...

CVE-2011-2150: Improper Input Validation

The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service parsing error and daemon pause via vectors involving 1 certain cookies in a SiteInfoLookup action to...

PT-2011-3645

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue concerns the generation of web pages containing email addresses by certain components in the SmarterTools SmarterStats web server. Specifically, the Admin/frmEmailReportSettings.aspx...

CVE-2011-2149: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain parameters to 1 Admin/frmSite.aspx, 2 Default.aspx, 3 Services/SiteAdmin.asmx, or 4 Client/frmViewReports.aspx; certain cookies to 5...

CVE-2011-2156: Exposure of Sensitive Information to an Unauthorized Actor

The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the 1 Admin/, 2 Admin/Defaults/, 3 Admin/GettingStarted/, 4 Admin/Popups/, 5 AppThemes/, 6 Client/, 7 Client/Popups/, 8 Services/, 9 Temp/, 10 UserControls/, 11...

CVE-2011-2151: Undefined Security Weakness

The 1 Admin/frmEmailReportSettings.aspx, 2 Admin/frmGeneralSettings.aspx, 3 Admin/frmSite.aspx, 4 Client/frmUser.aspx, and 5 Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information...

PT-2011-3643

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue concerns the Login.aspx page in the SmarterTools SmarterStats web server, where the ctl00$MPH$txtPassword password form field is generated without disabling the autocomplete feature...

PT-2011-3639

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as certain components in the SmarterTools SmarterStats web server accept cleartext passwords. The...

PT-2011-3637

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via certain parameters to specific API endpoints such as "Admin/frmSite.aspx", "Default.aspx",...

CVE-2011-2148: Improper Neutralization of Special Elements used in an OS Command

Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a leading and trailing & ampersand character, and 1 an STTTState cookie, 2 the ctl00%24MPH%24txtAdminNewPasswordSettingText parameter, 3 the...

PT-2011-3646

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue concerns the SmarterTools SmarterStats web server sending incorrect Content-Type headers for certain resources. This could potentially allow remote attackers to leverage an...

CVE-2011-2157: Undefined Security Weakness

The 1 Admin/frmEmailReportSettings.aspx and 2 Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate web pages containing e-mail addresses, which allows remote attackers to obtain potentially sensitive information by reading the default values of form...

SmarterTools default basic web server vulnerabilities

Overview Multiple SmarterTools applications install a default basic web server which contains multiple vulnerabilities Description Multiple SmarterTools applications by default install a basic web server which allows administrators to start using the application immediately after installation. Th...

SmarterTools SmarterMail 8.0 Cross Site Scripting

Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: March 14, 2011 Vendor: SmarterTools Application: SmarterMail Version 8.0 Bugs: Stored XSS, Reflected XSS Patch: None Available Timeline: Notify Vendor simultaneous with Vendor Publication:...