Matomo Analytics < 3.11.0 User Password Reset Vulnerability

Matomo Analytics before version 3.11.0 has mistakenly changed user passwords to a weak value. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

matomo cross-site scripting vulnerability (CNVD-2019-42232)

matomo is an open source web analytics application based on PHP and MySQL. A cross-site scripting vulnerability exists in matomo versions prior to 1.10.1. The vulnerability stems from the WEB application failing to properly validate client-side data. An attacker can exploit the vulnerability to...

Matomo Cross-Site Scripting Vulnerability

matomo is an open source web analytics application based on PHP and MySQL. A cross-site scripting vulnerability exists in matomo versions prior to 1.10.1. The vulnerability stems from the WEB application w failing to properly validate client-side data. An attacker can exploit the vulnerability to...

matomo cross-site scripting vulnerability (CNVD-2019-42239)

matomo is an open source web analytics application based on PHP and MySQL. A cross-site scripting vulnerability exists in matomo versions prior to 1.10.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerabilit...

CVE-2019-12215

A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this...

CVE-2019-12215

A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this...

Path traversal

DISPUTED A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance...

CVE-2019-12215

CVE-2019-12215 affects Matomo v3.9.1. A user can trigger an error to disclose the full installation path because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. The vendor disputes the severity of path disclosures. Reports from PT Security suggest modifying safemode.tw...

CVE-2019-12215

A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this...

CVE-2019-12215

A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this...

PT-2019-12702 · Matomo · Matomo

Name of the Vulnerable Software and Affected Versions: Matomo version 3.9.1 Description: A full path disclosure issue was discovered, allowing a user to trigger an error and discover the full path of Matomo on the disk. This occurs because lastError.file is used in...

Matomo Analytics < 3.8.0 Multiple XSS Vulnerabilities

Matomo Analytics before version 3.8.0 is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Matomo Analytics < 3.7.0 Multiple XSS Vulnerabilities

Matomo Analytics before version 3.7.0 is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

FreeBSD : matomo -- XSS vulnerability (44864c84-d3b8-11e8-b3cb-00e04c1ea73d)

Matomo reports : Several XSS issues have been fixed thanks to the great work of security researchers who responsible disclosed issues to us. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...

Matomo Analytics < 3.6.1 'reportTitle' XSS Vulnerability

Matomo Analytics before version 3.6.1 is prone to a cross-site scripting XSS vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

matomo -- XSS vulnerability

Matomo reports: Several XSS issues have been fixed thanks to the great work of security researchers who responsible disclosed issues to us...

Matomo Analytics Detection

The script sends a HTTP request to the server and attempts to identify Matomo formerly Piwik and its version from the reply. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WP-Piwik <= 1.0.10 - Unauthenticated Stored Cross-Site Scripting (XSS)

The WP-Matomo Integration WP-Piwik WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability...

WP-Piwik <= 1.0.4 - Cross-Site Scripting (XSS)

The WP-Matomo Integration WP-Piwik WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...