---
cve: "CVE-2011-2156"
severity: "LOW"
cvss: 3.1
epss: "2.6%"
vendor: "n/a"
kev: false
exploited: false
published: "2011-05-20 22:00:00"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-20T23:14:10+02:00"
---

# CVE-2011-2156

> 3.1 LOW

## Beschreibung

The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/Defaults/, (3) Admin/GettingStarted/, (4) Admin/Popups/, (5) App_Themes/, (6) Client/, (7) Client/Popups/, (8) Services/, (9) Temp/, (10) UserControls/, (11) UserControls/PanelBarTemplates/, (12) UserControls/Popups/, (13) aspnet_client/, or (14) aspnet_client/system_web/ directory name, or (15) certain directory names under App_Themes/Default/.

## Referenzen

- <https://exchange.xforce.ibmcloud.com/vulnerabilities/67826>
- <http://xss.cx/examples/smarterstats-60-oscommandinjection-directorytraversal-xml-sqlinjection.html.html>
- <http://www.kb.cert.org/vuls/id/MORO-8GYQR4>
- <http://www.kb.cert.org/vuls/id/240150>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2011-2156) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_