Lucene search

[email protected]CVE-2011-0004

HistoryJan 10, 2011 - 8:00 p.m.

CVE-2011-0004

2011-01-1020:00:17

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-0004

xss

piwik

web script

html

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Piwik before 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

matomomatomoRange≤1.0

matomomatomoMatch0.1

matomomatomoMatch0.1.1

matomomatomoMatch0.1.2

matomomatomoMatch0.1.3

matomomatomoMatch0.1.4

matomomatomoMatch0.1.5

matomomatomoMatch0.1.6

matomomatomoMatch0.1.7

matomomatomoMatch0.1.8

matomomatomoMatch0.1.9

matomomatomoMatch0.1.10

matomomatomoMatch0.2.1

matomomatomoMatch0.2.2

matomomatomoMatch0.2.3

matomomatomoMatch0.2.4

matomomatomoMatch0.2.5

matomomatomoMatch0.2.6

matomomatomoMatch0.2.7

matomomatomoMatch0.2.8

matomomatomoMatch0.2.9

matomomatomoMatch0.2.10

matomomatomoMatch0.2.11

matomomatomoMatch0.2.12

matomomatomoMatch0.2.13

matomomatomoMatch0.2.14

matomomatomoMatch0.2.16

matomomatomoMatch0.2.17

matomomatomoMatch0.2.18

matomomatomoMatch0.2.19

matomomatomoMatch0.2.20

matomomatomoMatch0.2.22

matomomatomoMatch0.2.23

matomomatomoMatch0.2.24

matomomatomoMatch0.2.25

matomomatomoMatch0.2.26

matomomatomoMatch0.2.27

matomomatomoMatch0.2.28

matomomatomoMatch0.2.29

matomomatomoMatch0.2.30

matomomatomoMatch0.2.31

matomomatomoMatch0.2.32

matomomatomoMatch0.2.33

matomomatomoMatch0.2.34

matomomatomoMatch0.4rc1

matomomatomoMatch0.4rc2

matomomatomoMatch0.4rc3

matomomatomoMatch0.4.1rc1

matomomatomoMatch0.4.4

matomomatomoMatch0.4.5

matomomatomoMatch0.5

matomomatomoMatch0.5.1

matomomatomoMatch0.5.2

matomomatomoMatch0.5.3

matomomatomoMatch0.5.4

matomomatomoMatch0.5.5

matomomatomoMatch0.6

matomomatomoMatch0.6.1

matomomatomoMatch0.6.2

matomomatomoMatch0.6.3

matomomatomoMatch0.6.3rc1

matomomatomoMatch0.6.3rc2

matomomatomoMatch0.6.4

matomomatomoMatch0.7

matomomatomoMatch0.8

matomomatomoMatch0.9

matomomatomoMatch0.9.9

CPENameOperatorVersion
matomo:matomomatomole1.0
matomo:matomomatomoeq0.1
matomo:matomomatomoeq0.1.1
matomo:matomomatomoeq0.1.2
matomo:matomomatomoeq0.1.3
matomo:matomomatomoeq0.1.4
matomo:matomomatomoeq0.1.5
matomo:matomomatomoeq0.1.6
matomo:matomomatomoeq0.1.7
matomo:matomomatomoeq0.1.8

CPE	Name	Operator	Version
matomo:matomo	matomo	le	1.0
matomo:matomo	matomo	eq	0.1
matomo:matomo	matomo	eq	0.1.1
matomo:matomo	matomo	eq	0.1.2
matomo:matomo	matomo	eq	0.1.3
matomo:matomo	matomo	eq	0.1.4
matomo:matomo	matomo	eq	0.1.5
matomo:matomo	matomo	eq	0.1.6
matomo:matomo	matomo	eq	0.1.7
matomo:matomo	matomo	eq	0.1.8

Rows per page:

1-10 of 631

References

openwall.com/lists/oss-security/2011/01/06/1

openwall.com/lists/oss-security/2011/01/06/15

osvdb.org/70310

piwik.org/blog/2011/01/piwik-1-1-2/

piwik.org/blog/2011/01/piwik-1-1-security-advisory/

piwik.org/blog/2011/01/professional-security-audit-in-piwik/

secunia.com/advisories/42809

www.securityfocus.com/bid/45659

www.vupen.com/english/advisories/2011/0013

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%

JSON

Related for CVE-2011-0004

nvd1 prion1 cvelist1