Description
Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by sqlhacker · textwebappsasp
https://www.exploit-db.com/exploits/15185
References (4)
Core 4
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/41389
Exploit x_refsource_misc
http://cloudscan.blogspot.com/2010/09/vendorsmarterstats-bug-cross-site.html
Exploit vdb-entry
x_refsource_osvdb
http://www.osvdb.org/67895
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/61724
Scores
EPSS
0.0265
EPSS Percentile
85.8%
Details
CWE
CWE-79
Status
published
Products (2)
smartertools/smarterstats
5.3
smartertools/smarterstats
5.3.3819
Published
Sep 16, 2010
Tracked Since
Feb 18, 2026