CVE-2011-2153: SmarterTools Smarterstats

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes it easier for context-dependent attackers to discover credentials by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, related to a "cross-domain Referer leakage" issue.

Affected products

• SmarterTools Smarterstats: version 6.0 only

Published 2011-05-20. Last modified 2026-06-16.