282 matches found
FreeBSD : piwik -- XSS vulnerability (22775cdd-395a-11e6-b3c8-14dae9d210b8)
Piwik reports : The Piwik Security team is grateful for the responsible disclosures by our security researchers: Egidio Romano granted a critical security bounty, James Kettle and Pawel Bartunek XSS and Emanuel Bronshtein limited XSS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Piwik < 2.16.0 Unspecified XSS
The version of Piwik running on the remote host is prior to 2.16.0. It is, therefore, affected by an unspecified cross-site scripting XSS vulnerability due to a failure to properly validate input before returning it to users. An unauthenticated, remote attacker can exploit this, via a crafted...
Piwik < 2.16.1-rc1 Multiple Vulnerabilities
The version of Piwik running on the remote web host is prior to version 2.16.1-rc1. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that may allow an attacker to have a critical impact. No further details are available. - Multiple unspecified cross-site...
piwik -- XSS vulnerability
Piwik reports: The Piwik Security team is grateful for the responsible disclosures by our security researchers: Egidio Romano granted a critical security bounty, James Kettle and Paweł Bartunek XSS and Emanuel Bronshtein limited XSS...
Gratipay: Sub Domain Take over
Dear Team, I find bug in https://gratipay.piwik.pro/ i can take over account https://gratipay.piwik.pro/ I share with you setup 1 https://gratipay.piwik.pro/ 2 Then i see msg like this "THIS SUBDOMAIN IS AVAILABLE! gratipay.piwik.pro is available! Use this subdomain for your Piwik Cloud service. ...
FreeBSD : piwik -- multiple vulnerabilities (11351c82-9909-11e5-a9c8-14dae9d5a9d2)
Piwik changelog reports : This release is rated critical. We are grateful for Security researchers who disclosed security issues privately to the Piwik Security Response team: Elamaran Venkatraman, Egidio Romano and Dmitriy Shcherbatov. The following vulnerabilities were fixed : XSS, CSRF, possib...
Piwik PHP对象注入漏洞
No description provided by source...
Piwik本地文件包含漏洞
No description provided by source...
Piwik Local File Containment Vulnerability
Piwik formerly known as phpMyVisites is an open source website access statistics system based on PHP5 and MySQL. A local file inclusion vulnerability exists in the core/ViewDataTable/Factory.php script in Piwik versions prior to 2.15.0. A remote attacker can exploit this vulnerability to include...
Piwik PHP Object Injection Vulnerability
Piwik formerly known as phpMyVisites is an open source website access statistics system based on PHP5 and MySQL. A security vulnerability exists in the 'DisplayTopKeywords' function in the plugins/Referrers/Controller.php script of Piwik versions prior to 2.15.0. A remote attacker can exploit thi...
piwik -- multiple vulnerabilities
Piwik changelog reports: This release is rated critical. We are grateful for Security researchers who disclosed security issues privately to the Piwik Security Response team: Elamaran Venkatraman, Egidio Romano and Dmitriy Shcherbatov. The following vulnerabilities were fixed: XSS, CSRF, possible...
CVE-2015-7816
The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...
CVE-2015-7815
Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter...
Directory traversal
Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter...
Server side request forgery (ssrf)
The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...
CVE-2015-7815
Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter...
CVE-2015-7815
Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter...
CVE-2015-7816
The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...
CVE-2015-7815
The CVE-2015-7815 entry is supported by multiple connected documents describing a Directory Traversal (Local File Inclusion) in Piwik prior to 2.15.0. The vulnerability occurs in core/ViewDataTable/Factory.php where the viewDataTable parameter is used to include local files, due to insufficient s...
CVE-2015-7816
The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...