Cross-Site Scripting Vulnerabilities in SmarterTools SmarterStats
CVE-2011-4750

Currently unrated

Key Information:

Vendor

Smartertools

Status
Smarterstats
Vendor
CVE Published:
16 December 2011

What is CVE-2011-4750?

SmarterTools SmarterStats version 6.2.4100 is affected by multiple cross-site scripting vulnerabilities that allow remote attackers to inject arbitrary web script or HTML through specially crafted input to certain PHP scripts, including Default.aspx. This may lead to unauthorized access or manipulation of user data, posing significant risks to web applications and users.

References

http://xss.cx/examples/exploits/stored-reflected-xss-cwe7...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.