CVE-2011-2149

Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain…

published May 20, 2011

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) Admin/frmSite.aspx, (2) Default.aspx, (3) Services/SiteAdmin.asmx, or (4) Client/frmViewReports.aspx; certain cookies to (5) Services/SiteAdmin.asmx or (6) login.aspx; the Referer HTTP header to (7) Services/SiteAdmin.asmx or (8) login.aspx; or (9) the User-Agent HTTP header to Services/SiteAdmin.asmx.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02350 · 83.5th percentile
Published
2011-05-20T22:00Z
EPSS history
Timeline
  • 20 MAY 22:00Z
    Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain…
    cvelistv5