Lucene search

K
freebsdFreeBSDFCBF56DD-E667-11DE-920A-00248C9B4BE7
HistoryDec 10, 2009 - 12:00 a.m.

piwik -- php code execution

2009-12-1000:00:00
vuxml.freebsd.org
23

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.062

Percentile

93.7%

secunia reports:

Stefan Esser has reported a vulnerability in Piwik, which can be
exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the core/Cookie.php script using
โ€œunserialize()โ€ with user controlled input. This can be exploited to
e.g. execute arbitrary PHP code via the โ€œ__wakeup()โ€ or โ€œ__destruct()โ€
methods of a serialized object passed via an HTTP cookie.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpiwik<ย 0.5.1UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.062

Percentile

93.7%

Related for FCBF56DD-E667-11DE-920A-00248C9B4BE7