Lucene search
Veracode Vulnerability DatabaseVERACODE:4610HistoryJul 19, 2017 - 10:49 p.m.
Server-side Request Forgery (SSRF)
2017-07-1922:49:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.01 Low
EPSS
Percentile
83.4%
Piwik is vulnerable to server-side request forgery (SSRF) attacks. These attacks are possible through a flaw in the DisplayTopKeywords function in plugins/Referrers/Controller.php which allows attackers to inject PHP objects and execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| piwik/piwik | le | 2.15.0-b5 |
Related
cvelist
cvelist
CVE-2015-7816
2015-11-16 19:00:00
nvd
nvd
CVE-2015-7816
2015-11-16 19:59:05
packetstorm
packetstorm
Piwik 2.14.3 PHP Object Injection
2015-11-04 00:00:00
prion
prion
Server side request forgery (ssrf)
2015-11-16 19:59:00
zdt
zdt
Piwik 2.14.3 PHP Object Injection Vulnerability
2015-11-04 00:00:00
cve
cve
CVE-2015-7816
2015-11-16 19:59:05
nessus
nessus
freebsd
freebsd
piwik -- multiple vulnerabilities
2015-11-17 00:00:00