Fluid Attacks Database

Description

Piwik (now Matomo) Vulnerable to Arbitrary Code Execution Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
packagist	matomo/matomo	>=1.2 <1.5	1.5
packagist	piwik/piwik	>=1.2 <1.5	1.5

Aliases

1. CVE-2011-49412. NVD-2011-49413. OSV-2011-49414. GCVE-2011-4941

References

1. https://web.archive.org/web/20110626223028/http://piwik.org/blog/2011/06/piwik-1-5-security-advisory2. http://www.openwall.com/lists/oss-security/2012/03/18/13. http://www.openwall.com/lists/oss-security/2012/03/19/8

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.