CVE-2015-7815

CVE-2015-7815

EPSS 3.0%

Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://karmainsecurity.com/KIS-2015-09 http://packetstormsecurity.com/files/134219/Piwik-2.14.3-Local-File-Inclusion.html http://seclists.org/fulldisclosure/2015/Nov/14 https://piwik.org/changelog/piwik-2-15-0/http://www.securityfocus.com/archive/1/536838/100/0/threaded