Unrated severityNVD Advisory· Published May 20, 2011· Updated Jun 16, 2026
CVE-2011-2151
CVE-2011-2151
Description
The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:smartertools:smarterstats:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:smartertools:smarterstats:6.0:*:*:*:*:*:*:*
- (no CPE)range: =6.0
Patches
Vulnerability mechanics
References
5- www.kb.cert.org/vuls/id/240150nvdUS Government Resource
- www.kb.cert.org/vuls/id/MORO-8GYQR4nvdUS Government Resource
- xss.cx/examples/exploits/stored-reflected-xss-cwe79-smarterstats624100.htmlnvd
- xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/67831nvd
News mentions
0No linked articles in our index yet.