SUSE CVE-2013-2633

Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters...

MediaWiki 跨站脚本漏洞

MediaWiki is a free and free-to-use web-based wiki engine from the US-based MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems.MediaWiki matomo-mediawiki-extension suffers from a cross-site scripting vulnerability that stems from a...

Malicious code in piwik-pro-angular-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79068cbf8199cbc4c530a577a4934b5e4c0fa657f5c84ef801c777fd77150c36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5346 Malicious code in piwik-pro-angular-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79068cbf8199cbc4c530a577a4934b5e4c0fa657f5c84ef801c777fd77150c36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Piwik (now Matomo) Vulnerable to Arbitrary Code Execution

Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors...

GHSA-2QR8-H6PQ-M27V Piwik (now Matomo) Vulnerable to Arbitrary Code Execution

Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors...

Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)

Cross-site scripting XSS vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests

Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters...

GHSA-V8H8-93MX-82H5 Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests

Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters...

GHSA-5FPJ-6VQ6-FMWH Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)

Cross-site scripting XSS vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WP-Matomo Integration (WP-Piwik) < 1.0.27 - Plugin Settings Reset via CSRF

The plugin does not have CSRF when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack https://example.com/wp-admin/options-general.php?page=wp-piwik%2Fclasses%2FWPPiwik.php&clear=2...

CVE-2020-29578

The official piwik Docker images before fpm-alpine Alpine specific contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access...

CVE-2020-29578

The official piwik Docker images before fpm-alpine Alpine specific contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access...

Default credentials

The official piwik Docker images before fpm-alpine Alpine specific contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access...

CVE-2020-29578

The official piwik Docker images before fpm-alpine Alpine specific contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access...

CVE-2020-29578

CVE-2020-29578 affects the official piwik Docker images prior to the fpm-alpine variant. The vulnerability is a blank root password in the Docker image, which could allow a remote attacker to gain root access on systems running affected containers. Mitigation/patch details are not explicitly prov...

CVE-2020-29578: Undefined Security Weakness

The official piwik Docker images before fpm-alpine Alpine specific contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access...

Docker Image Matomo Piwik Security Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

PT-2020-17201

Name of the Vulnerable Software and Affected Versions Piwik Docker images versions prior to fpm-alpine Description The issue concerns a blank password for a root user in the official Piwik Docker images. This could allow a remote attacker to achieve root access on systems using the Piwik Docker...

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...