283 matches found
Unrestricted file upload
Unrestricted file upload vulnerability in ofcuploadimage.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when registerglobals is enabled, allows remote authenticated users to...
CVE-2009-4140
Unrestricted file upload vulnerability in ofcuploadimage.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when registerglobals is enabled, allows remote authenticated users to...
CVE-2009-4140
CVE-2009-4140 affects Open Flash Chart’s ofc_upload_image.php in Open Flash Chart v2 Beta1 through v2 Lug Wyrm Charmer, used by Piwik 0.2.35–0.4.3 and Woopra Plugin before 1.4.3.2. The issue is an unrestricted file upload when register_globals is enabled, allowing remote authenticated users to up...
CVE-2009-4140
Unrestricted file upload vulnerability in ofcuploadimage.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when registerglobals is enabled, allows remote authenticated users to...
Piwik Open Flash Chart Remote Code Execution Vulnerability
No description provided by source. Bugtraq ID: 37314 Class: Input Validation Error CVE: Remote: Yes Local: No Published: Dec 14 2009 12:00AM Updated: Dec 17 2009 06:03PM Credit: Braeden Thomas Vulnerable: Piwik Piwik 0.4.3 Piwik Piwik 0.4.2 Piwik Piwik 0.4.1 Piwik Piwik 0.4 Piwik Piwik 0.2.37 Piw...
Piwik 'unserialize()' PHP代码执行漏洞
Bugraq ID: 37312 CVE ID：CVE-2009-4137 Piwik是一款开源的WEB统计系统。 Piwik unserializes用户输入允许攻击者发送特殊构建的cookie，可导致以应用程序权限执行任意PHP代码。 Piwik从cookie中获得数据进行unserialize操作，通过反序列化部分Piwik的对象，可覆盖WEB服务上可写目录下的任意文件，攻击者借此可用于上传任意PHP文件并以WEB权限执行。 Piwik 0.2.32 Piwik 0.4 Piwik 0.3 Piwik 0.5已经修复此漏洞，建议用户下载使用：...
Piwik Open Flash Chart - Remote Code Execution
Bugtraq ID: 37314 Class: Input Validation Error CVE: Remote: Yes Local: No Published: Dec 14 2009 12:00AM Updated: Dec 17 2009 06:03PM Credit: Braeden Thomas Vulnerable: Piwik Piwik 0.4.3 Piwik Piwik 0.4.2 Piwik Piwik 0.4.1 Piwik Piwik 0.4 Piwik Piwik 0.2.37 Piwik Piwik 0.2.36 Piwik Piwik 0.2.35...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. VID fcbf56dd-e667-11de-920a-00248c9b4be7 OpenVAS Vulnerability Test $ Description: Auto generated from VID fcbf56dd-e667-11de-920a-00248c9b4be7 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
FreeBSD Ports: piwik
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : piwik -- php code execution (fcbf56dd-e667-11de-920a-00248c9b4be7)
secunia reports : Stefan Esser has reported a vulnerability in Piwik, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to the core/Cookie.php script using 'unserialize' with user controlled input. This can be exploited to e.g. execute...
piwik -- php code execution
secunia reports: Stefan Esser has reported a vulnerability in Piwik, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to the core/Cookie.php script using "unserialize" with user controlled input. This can be exploited to e.g. execute...
Piwik < 0.5 unserialize() PHP Code Execution Vulnerability
Binary data 5263.prm...
Advisory 03/2009: Piwik Cookie unserialize() Vulnerability
SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Piwik Cookie Unserialize Vulnerability Release Date: 2009/12/09 Last Modified: 2009/12/09 Author: Stefan Esser stefan.esseratsektioneins.de Application: Piwik = 0.4.5 Severity: Piwik unserializes user input which allows an...
Piwik Build 1357 2009-08-02 Remote File Upload
Piwik Build , fclose$jfh; ? IV. PROOF OF CONCEPT ./libs/open-flash-chart/php-ofc-library/ofcuploadimag...
Piwik 1357 2009-08-02 - Arbitrary File Upload Code Execution
Piwik 1357 2009-08-02 - Arbitrary File Upload Code Execution Piwik Build , fclose$jfh; ? IV. PROOF OF CONCEPT ./libs/open-flash-chart/php-ofc-library/ofc...
Piwik <= 1357 2009-08-02 file upload and code execution
Exploit for unknown platform in category web applications ======================================================================== Piwik Build = 1357 2009-08-02 ofcuploadimage.php Remote File Upload ======================================================================== Piwik Build = 1357...
Piwik <= 1357 2009-08-02 file upload and code execution
No description provided by source. Piwik Build = 1357 2009-08-02 ofcuploadimage.php Remote File Upload Discovery: Braeden Thomas Versions Affected: All Piwik versions utilising open-flash-chart I. DESCRIPTION Piwik is an open source web analytics software. It gives interesting reports on your...
Piwik 1357 2009-08-02 - Arbitrary File Upload / Code Execution
Piwik Build , fclose$jfh; ? IV. PROOF OF CONCEPT ./libs/open-flash-chart/php-ofc-library/ofcuploadimage.php?name=shell.php&HTTPRAWPOSTDATA=?system$GE...
Improper access control
Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh...
CVE-2009-1085
Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh...