CVE-2011-0004

Multiple cross-site scripting XSS vulnerabilities in Piwik before 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-0004

Piwik before version 1.1 contains multiple XSS vulnerabilities that allow an attacker to inject arbitrary script/HTML via unspecified vectors. Impact is partial integrity exposure; exploitation could affect targeted pages in a user context. Remediation: upgrade to Piwik 1.1.2 or later (as advised...

CVE-2011-0399

Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2011-0401

Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attackers to cause a denial of service inode consumption by establishing many sessions...

CVE-2011-0004

Multiple cross-site scripting XSS vulnerabilities in Piwik before 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-0398

The PiwikCommon::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via 1 use of a private aka RFC 1918 address behind a proxy server or 2 spoofing of the X-Forwarded-For HTTP...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Piwik and OpenX multi-version there PHP remote execution vulnerability-vulnerability warning-the black bar safety net

The local test is successful The current official also did not give out the patch Analysis code: ? PHP / This temporary file, we will upload the image file to save the default path / $ defaultpath ='.. / tmp-upload-images/'; / Check whether the presence of the$ defaultpath variable / If （it!...

FreeBSD Ports: piwik

The remote host is missing an update to the system as announced in the referenced advisory. VID 26e1c48a-9fa7-11df-81b5-00e0814cab4e OpenVAS Vulnerability Test $ Description: Auto generated from VID 26e1c48a-9fa7-11df-81b5-00e0814cab4e Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: piwik

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : Piwik -- Local File Inclusion Vulnerability (26e1c48a-9fa7-11df-81b5-00e0814cab4e)

Piwik versions 0.6 through 0.6.3 are vulnerable to arbitrary, remote file inclusion using a directory traversal pattern infinite a crafted request for a data renderer. A vulnerability has been reported in Piwik, which can before exploited by malicious people to disclose potentially sensitive...

CVE-2010-2786

Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request...

Directory traversal

Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request...

CVE-2010-2786

Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request...

CVE-2010-2786

Piwik 0.6 through 0.6.3 are vulnerable to directory traversal that enables arbitrary local-file inclusion via a crafted data-renderer request (LFI). This can impact confidentiality, integrity, and availability as described in the CVE entry. Upgrade to 0.6.4 or later to remediate.

CVE-2010-2786

Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request...

Piwik 0.6 < 0.6.4 Remote File Include Vulnerability

Binary data 5618.prm...

Piwik -- Local File Inclusion Vulnerability

Piwik versions 0.6 through 0.6.3 are vulnerable to arbitrary, remote file inclusion using a directory traversal pattern infinite a crafted request for a data renderer. A vulnerability has been reported in Piwik, which can before exploited by malicious people to disclose potentially sensitive...

FreeBSD Ports: piwik

The remote host is missing an update to the system as announced in the referenced advisory. VID c0869649-5a0c-11df-942d-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID c0869649-5a0c-11df-942d-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: piwik

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...