CVE-2011-2154

概要

参考情報

• kb.cert.org/vuls/id/240150 · US Government Resource
• kb.cert.org/vuls/id/MORO-8GYQR4 · US Government Resource
• xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.html
• xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html
• exchange.xforce.ibmcloud.com/vulnerabilities/67828

smarterstats のその他の脆弱性

• CVE-2017-14620中 6.1SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in S…
• CVE-2011-4752緊急 10.0SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an…
• CVE-2011-4751中 5.0SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGetti…
• CVE-2011-4750中 4.3Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web scr…
• CVE-2011-2159緊急 10.0The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have…