Skip to content
OpenAdvisories

Package · Packagist

piwik/piwik

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2013-2633

    Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests

    Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters.

    matomo/matomo piwik/piwik Packagist
  • Medium —
    CVE-2011-4941

    Piwik (now Matomo) Vulnerable to Arbitrary Code Execution

    Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors.

    piwik/piwik matomo/matomo Packagist