Lucene search
PRIOn knowledge basePRION:CVE-2011-0398HistoryJan 10, 2011 - 8:00 p.m.
Design/Logic Flaw
2011-01-1020:00:00
PRIOn knowledge base
www.prio-n.com
1
The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via (1) use of a private (aka RFC 1918) address behind a proxy server or (2) spoofing of the X-Forwarded-For HTTP header.
Related
cvelist
cvelist
CVE-2011-0398
2011-01-10 19:18:00
nvd
nvd
CVE-2011-0398
2011-01-10 20:00:17
cve
cve
CVE-2011-0398
2011-01-10 20:00:17