Description
Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request.
References
- http://piwik.org/blog/2010/07/piwik-0-6-4-security-advisory/
- http://piwik.org/changelog/
- [oss-security] 20100729 Re: CVE Request: Piwik < 0.6.4 Arbitrary file inclusion mailing-list
- 66759 vdb-entry
- ADV-2010-1971 vdb-entry
- [oss-security] 20100728 CVE Request: Piwik < 0.6.4 Arbitrary file inclusion mailing-list
- 42031 vdb-entry
- piwik-data-renderer-file-include(60808) vdb-entry
- 40703 third-party-advisory