Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 6 Jan 2011 13:57:05 -0500 (EST)
From: Josh Bressers <>
Cc: coley <>
Subject: Re: CVE Request: Multiple XSS Vulnerabiliies < Piwik

Please use CVE-2011-0004 for the multiple XSS flaws.



----- Original Message -----
> Piwik 1.1 released on Jan 4, 2011, addresses numerous security issues
> following a security audit by SektionEins (led by Stefan Esser), an
> internal
> review, and coordinated disclosures from Jarosław Sajko
> ( and
> Fabian Becker.
> Notably, versions of Piwik prior to 1.1 contain multiple persistent
> and
> reflective XSS vulnerabilities through unescaped parameters and/or
> output.
> Security advisory:
> Other advisory:
> Changelog:

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.