CVE-2010-1453

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inject arbitrary web script or HTML via the form_url parameter.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://piwik.org/blog/2010/04/piwik-0-6-security-advisory/Vendor Advisory
http://secunia.com/advisories/39666Vendor Advisory
http://www.openwall.com/lists/oss-security/2010/05/05/3
http://www.openwall.com/lists/oss-security/2010/05/05/4
http://www.vupen.com/english/advisories/2010/1079Patch, Vendor Advisory
http://piwik.org/blog/2010/04/piwik-0-6-security-advisory/Vendor Advisory
http://secunia.com/advisories/39666Vendor Advisory
http://www.openwall.com/lists/oss-security/2010/05/05/3
http://www.openwall.com/lists/oss-security/2010/05/05/4
http://www.vupen.com/english/advisories/2010/1079Patch, Vendor Advisory

Timeline

Published: May 7, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-14546.8com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, a CVE-2010-14554.3The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of se CVE-2010-14574.9Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which print CVE-2010-14586.8Stack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight Simulator X (FSX) allows remote attackers to execu CVE-2010-14594.3The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote atta CVE-2010-14605.0The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iS CVE-2010-14615.0Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attackers to read arbitrar CVE-2010-146210.0Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter.CVE-2010-14637.5Multiple SQL injection vulnerabilities in WebAsyst Shop-Script FREE allow attackers to execute arbitrary SQL commands via the (1) add2cart, CVE-2010-14644.3Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HT CVE-2010-14659.3Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitrary code via a long CVE-2010-14666.8Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitrary files via the dsn[