漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Piwik https会话cookie泄露漏洞
Vulnerability Description
Piwik(前称phpMyVisites)是一套基于PHP5和MySQL的开源网站访问统计系统。 Piwik 1.1之前版本中的Cookie.php没有为在https会话中的会话cookie设置安全标记。远程攻击者更容易通过截获http会话中cookie的传输获得cookie。
CVSS Information
N/A
Vulnerability Type
N/A