283 matches found
CVE-2011-4941
Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors...
CVE-2011-4941
CVE-2011-4941 affects Piwik (now Matomo) versions 1.2 through 1.4. The vulnerability enables remote code execution for users with view permission, via unknown attack vectors. The public documents consistently describe an unspecified vulnerability allowing arbitrary code execution, with the CVE en...
CVE-2011-4941
Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors...
Piwik 0.4.3 File Upload
File upload vulnerability in Piwik ofcuploadimage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Piwik 0.6.3 LFI
Local file include vulnerability in Piwik format parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. VID da317bc9-59a6-11e1-bc16-0023ae8e59f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID da317bc9-59a6-11e1-bc16-0023ae8e59f0 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : piwik -- xss and click-jacking issues (da317bc9-59a6-11e1-bc16-0023ae8e59f0)
The Piwik Team reports : We would like to thank the following security researchers for their responsible disclosure of XSS and click-jacking issues : Piotr Duszynski, Sergey Markov, Mauro Gentile. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
piwik -- xss and click-jacking issues
The Piwik Team reports: We would like to thank the following security researchers for their responsible disclosure of XSS and click-jacking issues: Piotr Duszynski, Sergey Markov, Mauro Gentile...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. VID 411ecb79-f9bc-11e0-a7e6-6c626dd55a41 OpenVAS Vulnerability Test $ Description: Auto generated from VID 411ecb79-f9bc-11e0-a7e6-6c626dd55a41 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : piwik -- unknown critical vulnerabilities (411ecb79-f9bc-11e0-a7e6-6c626dd55a41)
Secunia reports : Multiple vulnerabilities with an unknown impact have been reported in Piwik. The vulnerabilities are caused due to unspecified errors. No further information is currently available. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
piwik -- unknown critical vulnerabilities
Secunia reports: Multiple vulnerabilities with an unknown impact have been reported in Piwik. The vulnerabilities are caused due to unspecified errors. No further information is currently available...
CVE-2011-3791
Piwik 1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Widgetize/Widgetize.php and certain other files...
Information disclosure
Piwik 1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Widgetize/Widgetize.php and certain other files...
CVE-2011-3791
Piwik 1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Widgetize/Widgetize.php and certain other files...
CVE-2011-3791
CVE-2011-3791 affects Piwik 1.1 and enables information disclosure through direct requests to PHP files (e.g., plugins/Widgetize/Widgetize.php), revealing installation paths in error messages. Root cause: error output leaks path information. Impact: partial confidentiality loss via remote access;...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. VID 23c8423e-9bff-11e0-8ea2-0019d18c446a OpenVAS Vulnerability Test $ Description: Auto generated from VID 23c8423e-9bff-11e0-8ea2-0019d18c446a Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : Piwik -- remote command execution vulnerability (23c8423e-9bff-11e0-8ea2-0019d18c446a)
The Piwik security advisory reports : The Piwik 1.5 release addresses a critical security vulnerability, which affect all Piwik users that have let granted some access to the 'anonymous' user. Piwik contains a remotely exploitable vulnerability that could allow a remote attacker to execute...