PT-2011-3638

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue is related to an "XML injection" problem where the web server does not properly validate string data intended for storage in an XML document. This allows remote attackers to cause a...

CVE-2011-2150: Improper Input Validation

The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service parsing error and daemon pause via vectors involving 1 certain cookies in a SiteInfoLookup action to...