Skip to content

CVE-2011-4752 SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict...

HighCVSS 10.0 EPSS 1.8%
Published
Updated
Exploit status
No public exploit known

Description

SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving frmCustomReport.aspx and certain other files. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.

Affected products

ProductAffected versionsFixed in
Smartertools smarterstats = 6.2.4100 No fix listed

References