Unscored severity · published Aug 2, 2010
CVE-2010-2786
Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory…
–
CVSS
2.7%
EPSS
No
On KEV
Description
Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Matomo · Matomo
0.6; 0.6.1; 0.6.2; 0.6.3; 0.6.3; 0.6.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2786
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2786
marc.info
http://marc.info/?l=oss-security&m=128032989120346&w=2
marc.info
http://marc.info/?l=oss-security&m=128041221832498&w=2
piwik.org
http://piwik.org/blog/2010/07/piwik-0-6-4-security-advisory/
piwik.org
http://piwik.org/changelog/
Vendor Advisory
http://secunia.com/advisories/40703
www.osvdb.org
http://www.osvdb.org/66759
More from Matomo
6.1
CVE-2023-6923
Matomo <= 4.15.3 - Reflected Cross-Site Scripting via idsite
6.1
CVE-2013-0195
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
6.1
CVE-2013-0194
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
6.1
CVE-2013-0193
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
4.3
CVE-2019-12215
A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because…