282 matches found
CVE-2011-0399
PIWIK (before 1.1) is vulnerable to clickjacking because the login form can be rendered within a frame by a third-party page. Root cause: login page displayed in an iframe without proper frame busting. Impact: enables clickjacking via a crafted site. Exploitation details are not provided in the d...
CVE-2011-0400
Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2011-0398
The PiwikCommon::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via 1 use of a private aka RFC 1918 address behind a proxy server or 2 spoofing of the X-Forwarded-For HTTP...
CVE-2011-0399
Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
CVE-2011-0401
Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attackers to cause a denial of service inode consumption by establishing many sessions...
CVE-2011-0004
Piwik before version 1.1 contains multiple XSS vulnerabilities that allow an attacker to inject arbitrary script/HTML via unspecified vectors. Impact is partial integrity exposure; exploitation could affect targeted pages in a user context. Remediation: upgrade to Piwik 1.1.2 or later (as advised...
Piwik and OpenX multi-version there PHP remote execution vulnerability-vulnerability warning-the black bar safety net
The local test is successful The current official also did not give out the patch Analysis code: ? PHP / This temporary file, we will upload the image file to save the default path / $ defaultpath ='.. / tmp-upload-images/'; / Check whether the presence of the$ defaultpath variable / If （it!...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. VID 26e1c48a-9fa7-11df-81b5-00e0814cab4e OpenVAS Vulnerability Test $ Description: Auto generated from VID 26e1c48a-9fa7-11df-81b5-00e0814cab4e Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
FreeBSD : Piwik -- Local File Inclusion Vulnerability (26e1c48a-9fa7-11df-81b5-00e0814cab4e)
Piwik versions 0.6 through 0.6.3 are vulnerable to arbitrary, remote file inclusion using a directory traversal pattern infinite a crafted request for a data renderer. A vulnerability has been reported in Piwik, which can before exploited by malicious people to disclose potentially sensitive...
CVE-2010-2786
Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request...
Directory traversal
Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request...
CVE-2010-2786
Piwik 0.6 through 0.6.3 are vulnerable to directory traversal that enables arbitrary local-file inclusion via a crafted data-renderer request (LFI). This can impact confidentiality, integrity, and availability as described in the CVE entry. Upgrade to 0.6.4 or later to remediate.
CVE-2010-2786
Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request...
CVE-2010-2786
Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request...
Piwik 0.6 < 0.6.4 Remote File Include Vulnerability
Binary data 5618.prm...
Piwik -- Local File Inclusion Vulnerability
Piwik versions 0.6 through 0.6.3 are vulnerable to arbitrary, remote file inclusion using a directory traversal pattern infinite a crafted request for a data renderer. A vulnerability has been reported in Piwik, which can before exploited by malicious people to disclose potentially sensitive...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. VID c0869649-5a0c-11df-942d-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID c0869649-5a0c-11df-942d-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Piwik < 0.6 form_url参数跨站脚本漏洞
BugCVE: CVE-2010-1453 BUGTRAQ: 39144 Piwik是一款利用Php+MySQL技术构建的开源网页访问统计系统。 Piwik没有正确地过滤提交给index.php页面的formurl参数便返回给了用户，攻击者诱骗用户跟随恶意的登录URL链接就可以执行反射式跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 Piwik 0.6 厂商补丁： Piwik ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://piwik.org/latest.zip...