Unscored severity · published Sep 18, 2012
CVE-2011-4941
Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors
–
CVSS
2.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Matomo · Matomo
1.2; 1.2.1; 1.3; 1.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4941
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4941
Vendor Advisory
http://piwik.org/blog/2011/06/piwik-1-5-security-advisory/
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/03/18/1
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/03/19/8
More from Matomo
6.1
CVE-2023-6923
Matomo <= 4.15.3 - Reflected Cross-Site Scripting via idsite
6.1
CVE-2013-0195
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
6.1
CVE-2013-0194
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
6.1
CVE-2013-0193
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
4.3
CVE-2019-12215
A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because…