CVE-2011-2151

The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
Configurations

Configuration 1 (hide)

cpe:2.3:a:smartertools:smarterstats:6.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:27

Type Values Removed Values Added
References () http://www.kb.cert.org/vuls/id/240150 - US Government Resource () http://www.kb.cert.org/vuls/id/240150 - US Government Resource
References () http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - US Government Resource () http://www.kb.cert.org/vuls/id/MORO-8GYQR4 - US Government Resource
References () http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html - () http://xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html -
References () http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html - () http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/67831 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/67831 -

Information

Published : 2011-05-20 22:55

Updated : 2024-11-21 01:27


NVD link : CVE-2011-2151

Mitre link : CVE-2011-2151

CVE.ORG link : CVE-2011-2151


JSON object : View

Products Affected

smartertools

  • smarterstats
CWE
CWE-310

Cryptographic Issues