oss-sec mailing list archives

Re: CVE request: Piwik before 1.7

From: Nicob <nicob () nicob net>
Date: Sun, 13 May 2012 21:12:18 +0200

Ok well do a code diff and post it, XSS is usually pretty easy to spot
in PHP.


Click-jacking patch (3 months old):
http://dev.piwik.org/trac/changeset/5804

But I didn't found any recent ticket or changeset related to XSS.

Nicob

Current thread:

CVE request: Piwik before 1.7 Hanno Böck (May 08)
- Re: CVE request: Piwik before 1.7 Kurt Seifried (May 08)
  - Re: CVE request: Piwik before 1.7 Henri Salo (May 13)
    - Re: CVE request: Piwik before 1.7 Hanno Böck (May 13)
    - Re: CVE request: Piwik before 1.7 Kurt Seifried (May 13)
    - Re: CVE request: Piwik before 1.7 Nicob (May 13)
  - Re: CVE request: Piwik before 1.7 Henri Salo (Jun 07)