Unrated severityNVD Advisory· Published Mar 8, 2010· Updated Apr 29, 2026

CVE-2010-0941

Description

Multiple cross-site scripting (XSS) vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) inc/login.php, (3) admin/index.php, and (4) admin/forgot.php.

Affected products

Web Site Development/Etek Systems Hit Counter
cpe:2.3:a:web-site-development:etek_systems_hit_counter:2.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.org/1001-exploits/hitcounter-xss.txtnvdExploit
www.exploit-db.com/exploits/10887nvdExploit
secunia.com/advisories/38052nvdVendor Advisory
www.osvdb.org/61442nvd
www.osvdb.org/61443nvd
www.osvdb.org/61444nvd
exchange.xforce.ibmcloud.com/vulnerabilities/55285nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000