Matomo 0.2.30
Approved changes feed: RSS · Atom
cpe:2.3:a:matomo:matomo:0.2.30:*:*:*:*:*:*:*
part: a version: 0.2.30 update: *
| Vendor | Matomo (21a512e7-6247-5f2d-9ce2-74205c18c8ba) |
|---|---|
| Product | Matomo (0baf95f5-d38a-51b6-b353-58f62e1ceb8b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/matomo-org/matomo |
purl2cpe | 2026-06-01 10:15:16.497674 |
pkg:rpm/opensuse/matomo |
purl2cpe | 2026-06-01 10:15:16.497675 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-0401 |
vulnerable | 2026-06-08 04:56:36.793770 |
Details available
Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attackers to cause a denial of service (inode consumption) by establishing many sessions.
Published: 2011-01-10T19:18:00.000Z
Updated: 2024-08-06T21:51:08.771Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0400 |
vulnerable | 2026-06-08 04:56:36.792049 |
Details available
Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Published: 2011-01-10T19:18:00.000Z
Updated: 2024-08-06T21:51:08.690Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0399 |
vulnerable | 2026-06-08 04:56:36.790325 |
Details available
Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Published: 2011-01-10T19:18:00.000Z
Updated: 2024-08-06T21:51:09.060Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0398 |
vulnerable | 2026-06-08 04:56:36.788563 |
Details available
The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via (1) use of a private (aka RFC 1918) address behind a proxy server or (2) spoofing of the X-Forwarded-For HTTP header.
Published: 2011-01-10T19:18:00.000Z
Updated: 2024-08-06T21:51:08.636Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0004 |
vulnerable | 2026-06-08 04:56:32.944986 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Piwik before 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-01-10T19:18:00.000Z
Updated: 2024-08-06T21:36:02.326Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1453 |
vulnerable | 2026-06-08 04:54:08.207959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4137 |
vulnerable | 2026-06-08 04:51:47.244738 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1085 |
vulnerable | 2026-06-08 04:51:12.964598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.