EUVD-2011-2146

Malware in sbrugna...

CVE-2011-2154: Exposure of Sensitive Information to an Unauthorized Actor

login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...

PT-2011-3642

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue concerns the SmarterTools SmarterStats web server, where the login.aspx page does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie. This omission make...