[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzzexnhLl87T2r_VzJuNxqf2nFvdu_F9cKKnGXqjQ6-o":3,"g5a-ex:smartertools\u002Fsmarterstats@*":103,"g5a-family:smartertools\u002Fsmarterstats":105},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":80,"seoMetadata":81,"meta":100},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"smartertools","smarterstats",5,17,0,"2017-09-30",[14,18,20,22,25],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"11.3.6347",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"5.3",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"5.3.3819",{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},"6.0",12,{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"6.2.4100",3,"Smarterstats by Smartertools is a technology product with 5 tracked versions and 17 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33,34],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},[36,44,48,52,58,63,67,70,74,77],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":43},"CVE-2011-2148","Admin\u002FfrmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a leading and trailing & (ampersand) character, and (1) an STTTState cookie, (2) the ctl00%24MPH%24txtAdminNewPassword_SettingText parameter, (3) the ctl00%24MPH%24txtSmarterLogDirectory parameter, (4) the ctl00%24MPH%24ucSiteSeoSearchEngineSettings%24chklistEngines_SettingCheckBox%2414 parameter, (5) the ctl00%24MPH%24ucSiteSeoSettings%24txtSeoMaxKeywords_SettingText parameter, or (6) the ctl00_MPH_grdLogLocations_HiddenLSR parameter, related to an \"OS command injection\" issue.","2011-05-20",10,"v2","Critical",0.05321,{"cveId":45,"description":46,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":47},"CVE-2011-2158","The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin\u002FfrmSite.aspx, (2) Admin\u002FfrmSites.aspx, (3) Admin\u002FfrmViewReports.aspx, (4) App_Themes\u002FAboutThisFolder.txt, (5) Client\u002FfrmViewReports.aspx, (6) Temp\u002FAboutThisFolder.txt, (7) default.aspx, (8) login.aspx, or (9) certain .jpg URIs under Temp\u002F.  NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.",0.04384,{"cveId":49,"description":50,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":51},"CVE-2011-2159","The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin\u002FDefaults\u002FfrmDefaultSiteSettings.aspx, (2) Admin\u002FDefaults\u002FfrmServerDefaults.aspx, (3) Admin\u002FfrmReportSettings.aspx, (4) Admin\u002FfrmSite.aspx, (5) App_Themes\u002FDefault\u002FButtonBarIcons.xml, (6) App_Themes\u002FDefault\u002FSkin.xml, (7) Client\u002FfrmImportSettings.aspx, (8) Client\u002FfrmSeoSettings.aspx, (9) Services\u002FWeb.config, (10) aspnet_client\u002Fsystem_web\u002F4_0_30319\u002F, (11) clientaccesspolicy.xml, (12) cloudscan.exe, (13) crossdomain.xml, or (14) sitemap.xml.  NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.",0.04377,{"cveId":53,"description":54,"publishedDate":39,"cvssScore":55,"cvssVersion":41,"severity":56,"isKev":17,"epssScore":57},"CVE-2011-2155","Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation.",7.5,"High",0.03913,{"cveId":59,"description":60,"publishedDate":39,"cvssScore":9,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":62},"CVE-2011-2150","The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error and daemon pause) via vectors involving (1) certain cookies in a SiteInfoLookup action to Admin\u002FfrmSites.aspx, or certain (2) cookies or (3) parameters to (a) Client\u002FfrmViewOverviewReport.aspx, (b) Client\u002FfrmViewReports.aspx, or (c) Services\u002FSiteAdmin.asmx, as demonstrated by a ]]>> string, related to an \"XML injection\" issue.","Medium",0.03024,{"cveId":64,"description":65,"publishedDate":39,"cvssScore":9,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":66},"CVE-2011-2151","The (1) Admin\u002FfrmEmailReportSettings.aspx, (2) Admin\u002FfrmGeneralSettings.aspx, (3) Admin\u002FfrmSite.aspx, (4) Client\u002FfrmUser.aspx, and (5) Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.",0.02667,{"cveId":68,"description":69,"publishedDate":39,"cvssScore":9,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":66},"CVE-2011-2154","login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.",{"cveId":71,"description":72,"publishedDate":39,"cvssScore":9,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":73},"CVE-2011-2156","The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin\u002F, (2) Admin\u002FDefaults\u002F, (3) Admin\u002FGettingStarted\u002F, (4) Admin\u002FPopups\u002F, (5) App_Themes\u002F, (6) Client\u002F, (7) Client\u002FPopups\u002F, (8) Services\u002F, (9) Temp\u002F, (10) UserControls\u002F, (11) UserControls\u002FPanelBarTemplates\u002F, (12) UserControls\u002FPopups\u002F, (13) aspnet_client\u002F, or (14) aspnet_client\u002Fsystem_web\u002F directory name, or (15) certain directory names under App_Themes\u002FDefault\u002F.",0.0264,{"cveId":75,"description":76,"publishedDate":39,"cvssScore":9,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":73},"CVE-2011-2152","The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Client\u002FfrmViewReports.aspx or (2) UserControls\u002FPopups\u002FfrmHelp.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (a) web-server access logs or (b) web-server Referer logs, related to a \"cross-domain Referer leakage\" issue.",{"cveId":78,"description":79,"publishedDate":39,"cvssScore":9,"cvssVersion":41,"severity":61,"isKev":17,"epssScore":73},"CVE-2011-2157","The (1) Admin\u002FfrmEmailReportSettings.aspx and (2) Admin\u002FfrmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate web pages containing e-mail addresses, which allows remote attackers to obtain potentially sensitive information by reading the default values of form fields.",[],{"title":82,"metaDescription":83,"keywords":84,"structuredData":85},"Smarterstats by Smartertools - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Smarterstats by Smartertools covering 5 versions with 17 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Smarterstats vulnerabilities, Smarterstats security, Smarterstats CVE, Smartertools Smarterstats, Smarterstats threat intelligence, Smartertools security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":86,"@type":87,"name":88,"description":83,"url":89,"manufacturer":90,"applicationCategory":94,"softwareVersion":95,"mainEntity":96},"https:\u002F\u002Fschema.org","SoftwareApplication","Smarterstats","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsmartertools\u002Fsmarterstats",{"@type":91,"name":92,"url":93},"Organization","Smartertools","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsmartertools","Security Software","5 versions tracked",{"@type":97,"name":98,"description":99,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Smarterstats Security Vulnerabilities","Security vulnerabilities affecting Smarterstats by Smartertools",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":101,"apiVersion":102},"2026-10-30T18:53:05.434Z","3.0",{"rows":104,"total":11,"capped":17,"failed":11},[],[]]