CVE-2011-2149
Summary
by MITRE
Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) Admin/frmSite.aspx, (2) Default.aspx, (3) Services/SiteAdmin.asmx, or (4) Client/frmViewReports.aspx; certain cookies to (5) Services/SiteAdmin.asmx or (6) login.aspx; the Referer HTTP header to (7) Services/SiteAdmin.asmx or (8) login.aspx; or (9) the User-Agent HTTP header to Services/SiteAdmin.asmx.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 12/02/2024
Xxx Xxx-xxxx-xxxx Xxxxxxxxxxxxx Xxxxxxxxxx X Xxxxxxxx Xxx Xxxxxxxxx Xxxx Xx Xxxxxxxxxxxx Xxxxxxxxxxxx X.x Xxx Xxxxxx Xxxxxxxx Xxxx Xxxxxxx Xxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxx Xxxxx Xxx Xxxxxx Xxxxxxxx Xxxxxxxxxxx Xxxxxxxx Xxx-xx, Xxxxx Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxx Xx Xxxxxxxx Xxxxxxxxxxxx. Xxx Xxxx Xxxxxx Xxx Xx Xxxxxxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxx Xxxxxxxxxx Xxxxxx Xxx Xxx Xxxxxxxxxxx'x Xxxxxxxxx Xxxxxxxx Xxxxxxxxx, Xxxxxxxxxxxx Xx Xxxxxxxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxx Xxxxx Xxxxxx Xxxxxx Xxx Xxxxxxxxxxx'x Xxx Xxxxxxxxx, Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxx Xxxx Xx Xxxxx/xxxxxxx.xxxx Xxx Xxxxxxx.xxxx, Xx Xxxx Xx Xxx Xxxxxxx Xxxxxxxxx Xxxx Xxxxxxxx/xxxxxxxxx.xxxx Xxx Xxxxxx/xxxxxxxxxxxxxx.xxxx. Xxxxxxxxx Xxx Xxxxxxxxxx Xxxxxxxxxx Xx Xxxxx Xxxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxx Xxxxxxxx Xxxx Xxxxxx Xxxxxx Xxxxxxxxxxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxx Xx Xxxxxx Xxxxxxxx Xx Xxxxxxxx/xxxxxxxxx.xxxx Xxx Xxxxx.xxxx, Xxxxx Xxxxxxxx-xxxxxxxxxx Xxxxxx Xxxxxx Xxx Xx Xxxx Xx Xxxxxxx Xxxxxxxxx Xxx Xxxxxxxx. Xxxxxxxxxxxx, Xxxx Xxxxxxx Xxxxxxxxx Xxxxxxx Xxx Xxxx-xxxxx Xxx Xxxxx Xx Xxxxxxxxx Xxxxxxx, Xxxxxxxxxxxxx Xxx Xxxxxxx Xx Xxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxx Xxx Xxxxxxxxxxx'x Xxxxx Xxxxxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xx Xxxxxx Xx Xx Xxxxxx Xxxxxx Xxxxxxxxx Xx Xxxx Xxxxxxxxxxxx Xxxxxx Xx Xxx Xxxxxxxxxx Xxxxxxxx Xxxxxx Xxx Xxxxxxx Xxxxxxxxx Xxxxxxxx Xxxx Xxx Xxxxxxxxxx Xx Xxx Xxxxxxxx Xxxx. Xxxx Xxxxxxx X Xxxxxxx Xxx Xxxx Xxxxxxxxxxxx, Xxxx Xxxxxxxxxx, Xxxxxxxxx Xxxxxxxxxx, Xxx Xxxxxxxxx Xxxxxx Xxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxx Xxx Xxxxxxxxxxxxxx Xxxxxxxxxxxxx Xx Xxxxxxxxxxxx X.x, Xxxxx Xxxxx Xxxx Xx Xxxxxxxx Xxxxxx Xxxxxxxx Xx Xxxxxxxxx Xxx Xxxxxxxx Xxx Xxxxxxxx Xxxxxx Xx Xxxxxxxxxx Xxxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxxxxxxxx Xxxxxx Xxx Xxxxxxxx Xxxxxxxxxxx. Xxxxxxxxxxxxx Xxxxx Xxxx Xxxxxxxx Xxxx Xxxxxxxxxxx Xxxx Xx Xxxxxxxxxxxx Xxxx Xxxxxx Xxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxx Xxx-xxxx-xxxx Xxxxxx Xxxxx Xx Xxxxxxxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxx. Xxxxxxxxxxxxx Xxxx Xxxxxx Xxxx Xxx Xxxx-xxxxxxxx Xxxxx Xx Xxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxxx Xxxxxxxxxx, Xxxxxxxxxxxx Xx Xxxxx Xxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxxx Xxx Xxx Xxxxxxx Xxxxx. Xxx Xxxxxxxxxxxxxx Xx Xxx Xxxxxxxxxxx Xxxxxxxxx Xxx Xxxxx Xxxxxxxxx Xxxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxx. Xxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxx Xx Xxxxxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxx Xxxxxxx. Xxxxxxxx Xxxxxxxxxx Xxxxxx Xx Xxxxxxxx Xx Xxxxxx Xxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxx Xxx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxx. Xxxxxxxxx Xx Xxx&xx Xxxxxxxxx Xxxxxxxxxx, Xxxx Xxxxxxxxxxxxx Xxxx Xx Xxxxx.xxx Xxx Xxxxxxxxxxx Xxxxx Xxxxxxxx Xxx Xxxxx Xxx Xxxxxxx Xxxxxx-xxxxxx Xxxxxxxxxxx, Xxxxxxxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxx Xxxxxx Xxxxxxx Xxxxxxxx Xx Xxxxxxx Xxxxxxxxxxxx.