CVE-2015-7816

概要

参考情報

• karmainsecurity.com/KIS-2015-10 · Exploit
• packetstormsecurity.com/files/134220/Piwik-2.14.3-PHP-Object-Injection.html · Exploit
• seclists.org/fulldisclosure/2015/Nov/15 · Exploit
• securityfocus.com/archive/1/536839/100/0/threaded
• piwik.org/changelog/piwik-2-15-0 · Vendor Advisory

matomo のその他の脆弱性

• CVE-2023-6923中 6.1The Matomo Analytics – Ethical Stats. Powerful Insights. plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the idsite…
• CVE-2013-0195中 6.1Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NO…
• CVE-2013-0194中 6.1Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NO…
• CVE-2013-0193中 6.1Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NO…
• CVE-2019-12215中 4.3A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path o…