What is the severity of CVE-2010-2786?

CVE-2010-2786 is considered to have a medium severity due to its potential for arbitrary file inclusion.

How do I fix CVE-2010-2786?

To fix CVE-2010-2786, upgrade Piwik to version 0.6.4 or later, which addresses this vulnerability.

What types of attacks are possible through CVE-2010-2786?

CVE-2010-2786 allows attackers to conduct remote file inclusion attacks, potentially leading to code execution on the server.

Which versions of Piwik are affected by CVE-2010-2786?

CVE-2010-2786 affects Piwik versions 0.6 through 0.6.3.

Is CVE-2010-2786 still a risk if using a newer version of Piwik?

If you are using a version of Piwik later than 0.6.4, CVE-2010-2786 is no longer a risk.

Vulnerability/
CVE-2010-2786

medium

6.8

CWE

2/8/2010

21/11/2019

CVE-2010-2786: Path Traversal

First published: Mon Aug 02 2010(Updated: )

Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
MediaWiki Matomo	=0.6
MediaWiki Matomo	=0.6.1
MediaWiki Matomo	=0.6.2
MediaWiki Matomo	=0.6.3-rc1
MediaWiki Matomo	=0.6.3
MediaWiki Matomo	=0.6.3-rc2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2010-2786?
CVE-2010-2786 is considered to have a medium severity due to its potential for arbitrary file inclusion.
How do I fix CVE-2010-2786?
To fix CVE-2010-2786, upgrade Piwik to version 0.6.4 or later, which addresses this vulnerability.
What types of attacks are possible through CVE-2010-2786?
CVE-2010-2786 allows attackers to conduct remote file inclusion attacks, potentially leading to code execution on the server.
Which versions of Piwik are affected by CVE-2010-2786?
CVE-2010-2786 affects Piwik versions 0.6 through 0.6.3.
Is CVE-2010-2786 still a risk if using a newer version of Piwik?
If you are using a version of Piwik later than 0.6.4, CVE-2010-2786 is no longer a risk.

agent/last-modified-date
agent/first-publish-date
agent/type
agent/weakness
agent/author
agent/references
agent/severity
agent/description
agent/event
agent/softwarecombine
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/matomo
canonical/mediawiki matomo
version/mediawiki matomo/0.6
version/mediawiki matomo/0.6.1
version/mediawiki matomo/0.6.2
version/mediawiki matomo/0.6.3-rc1
version/mediawiki matomo/0.6.3
version/mediawiki matomo/0.6.3-rc2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2010-2786?
CVE-2010-2786 is considered to have a medium severity due to its potential for arbitrary file inclusion.
How do I fix CVE-2010-2786?
To fix CVE-2010-2786, upgrade Piwik to version 0.6.4 or later, which addresses this vulnerability.
What types of attacks are possible through CVE-2010-2786?
CVE-2010-2786 allows attackers to conduct remote file inclusion attacks, potentially leading to code execution on the server.
Which versions of Piwik are affected by CVE-2010-2786?
CVE-2010-2786 affects Piwik versions 0.6 through 0.6.3.
Is CVE-2010-2786 still a risk if using a newer version of Piwik?
If you are using a version of Piwik later than 0.6.4, CVE-2010-2786 is no longer a risk.