CVE-2010-2786

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-08-02 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request.

Affected products

matomoteam Matomo Analytics – Powerful, Privacy-First Insights for WordPress: 0.6, 0.6.1, 0.6.2, 0.6.3, 0.6.3-rc1, 0.6.3-rc2

References

http://marc.info/?l=oss-security&m=128032989120346&w=2
http://marc.info/?l=oss-security&m=128041221832498&w=2
http://piwik.org/blog/2010/07/piwik-0-6-4-security-advisory/
http://piwik.org/changelog/
http://secunia.com/advisories/40703
http://www.osvdb.org/66759
http://www.securityfocus.com/bid/42031
http://www.vupen.com/english/advisories/2010/1971
https://exchange.xforce.ibmcloud.com/vulnerabilities/60808
http://marc.info/?l=oss-security&m=128032989120346&w=2
http://marc.info/?l=oss-security&m=128041221832498&w=2
http://piwik.org/blog/2010/07/piwik-0-6-4-security-advisory/

Get alerted when CVE-2010-2786 or the next vulnerability affects your stack