CVE-2011-2150: SmarterTools Smarterstats

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error and daemon pause) via vectors involving (1) certain cookies in a SiteInfoLookup action to Admin/frmSites.aspx, or certain (2) cookies or (3) parameters to (a) Client/frmViewOverviewReport.aspx, (b) Client/frmViewReports.aspx, or (c) Services/SiteAdmin.asmx, as demonstrated by a ]]>> string, related to an "XML injection" issue.

Affected products

• SmarterTools Smarterstats: version 6.0 only

Published 2011-05-20. Last modified 2026-06-16.