CVE-2011-2152

The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1)…

published May 20, 2011

CVSS
—
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Client/frmViewReports.aspx or (2) UserControls/Popups/frmHelp.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (a) web-server access logs or (b) web-server Referer logs, related to a "cross-domain Referer leakage" issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02640 · 85.4th percentile
Published
2011-05-20T22:00Z
EPSS history
Timeline
  • 20 MAY 22:00Z
    The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1)…
    cvelistv5