Lucene search
+L

282 matches found

Prion
Prion
added 2019/11/20 3:15 p.m.15 views

Cross site scripting

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

4.3CVSS5.9AI score0.01161EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2019/11/20 3:15 p.m.6 views

CVE-2013-0194

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195...

6.1CVSS5.8AI score0.01161EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/20 3:15 p.m.21 views

CVE-2013-0195

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194...

6.1CVSS6.5AI score0.01161EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2019/11/20 3:15 p.m.19 views

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

6.1CVSS6.5AI score0.01161EPSS
SaveExploits0References2
CVE
CVE
added 2019/11/20 2:31 p.m.58 views

CVE-2013-0195

The CVE-2013-0195 entry corresponds to a Cross-site Scripting (XSS) vulnerability in Matomo/Piwik prior to version 1.10.1. Connected sources attribute the issue to improper validation of client-side data, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. Th...

6.1CVSS5.9AI score0.01161EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2019/11/20 2:31 p.m.13 views

CVE-2013-0195

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194...

6.1CVSS6AI score0.01161EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/11/20 2:31 p.m.19 views

CVE-2013-0195

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194...

5.9AI score0.01161EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/11/20 2:30 p.m.27 views

CVE-2013-0194

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195...

5.9AI score0.01161EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2019/11/20 2:30 p.m.9 views

CVE-2013-0194

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195...

6.1CVSS6AI score0.01161EPSS
SaveExploits0
CVE
CVE
added 2019/11/20 2:30 p.m.56 views

CVE-2013-0194

CVE-2013-0194 is an XSS vulnerability in Matomo (formerly Piwik) before 1.10.1. The flaw allows remote attackers to inject arbitrary JavaScript/HTML via unspecified vectors, potentially impacting user sessions and data integrity. Multiple connected sources (CNVD entries and related CVEs) corrobor...

6.1CVSS5.9AI score0.01161EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2019/11/20 2:26 p.m.61 views

CVE-2013-0193

CVE-2013-0193 describes a cross-site scripting (XSS) vulnerability in Piwik/Matomo prior to version 1.10.1. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue is cited as a distinct vulnerability from CVE-2013-0194 and CVE-2013-0195. Exploit...

6.1CVSS5.9AI score0.01161EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/11/20 2:26 p.m.22 views

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

5.9AI score0.01161EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2019/11/20 2:26 p.m.17 views

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

6.1CVSS6AI score0.01161EPSS
SaveExploits0
NVD
NVD
added 2019/09/20 4:15 p.m.17 views

CVE-2015-9405

The wp-piwik plugin before 1.0.5 for WordPress has XSS...

6.1CVSS6.4AI score0.01493EPSS
SaveExploits0References3
Prion
Prion
added 2019/09/20 4:15 p.m.21 views

Cross site scripting

The wp-piwik plugin before 1.0.5 for WordPress has XSS...

4.3CVSS7.2AI score0.01493EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/09/20 3:16 p.m.22 views

CVE-2015-9405

The wp-piwik plugin before 1.0.5 for WordPress has XSS...

6.4AI score0.01493EPSS
SaveExploits0References3
CVE
CVE
added 2019/09/20 3:16 p.m.178 views

CVE-2015-9405

CVE-2015-9405 affects the WordPress plugin WP-Piwik (WP-Matomo Integration) prior to version 1.0.5, with a Cross-Site Scripting (XSS) vulnerability reported. The vulnerability is documented across multiple feeds (NVD/NIST, RH Red Hat advisory, OpenVAS/NASL listing, WPVulndb, CVE list) and is desc...

6.1CVSS6.3AI score0.01493EPSS
SaveExploits0References3Affected Software1
Circl
Circl
added 2018/05/29 3:50 p.m.4 views

CVE-2025-34104

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/piwiksuperuserpluginupload.rb 2025-10-23 21:13:04+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

9.4CVSS5.6AI score0.01128EPSS
SaveExploits1References1
Veracode
Veracode
added 2017/07/29 12:28 p.m.22 views

Cross-site Scripting (XSS)

Piwik is susceptible to cross-site scripting XSS attacks. The attacks exist because it does not sanitize the user-supplied input...

4.3CVSS5.4AI score0.00931EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2017/07/28 9:50 a.m.18 views

Directory Traversal

Piwik is vulnerable to directory traversal. The attacks exist because core/ViewDataTable/Factory.php does not properly sanitize the viewDataTable parameter...

7.5CVSS6.1AI score0.02956EPSS
SaveExploits3References6Affected Software1
Rows per page
Query Builder