Code injection

The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving 1 Admin/frmSite.aspx, 2 Admin/frmSites.aspx, 3 Admin/frmViewReports.aspx, 4...

CVE-2011-2150: Improper Input Validation

The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service parsing error and daemon pause via vectors involving 1 certain cookies in a SiteInfoLookup action to...

PT-2011-3638

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue is related to an "XML injection" problem where the web server does not properly validate string data intended for storage in an XML document. This allows remote attackers to cause a...