CVE-2010-0941

no score yetEPSS 1.3%

Multiple cross-site scripting (XSS) vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) inc/login.php, (3) admin/index.php, and (4) admin/forgot.php.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2010-03-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

web-site-development:etek_systems_hit_counter

References

http://packetstormsecurity.org/1001-exploits/hitcounter-xss.txt
http://secunia.com/advisories/38052
http://www.exploit-db.com/exploits/10887
http://www.osvdb.org/61442
http://www.osvdb.org/61443

Check your stack JSON