Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Piwik https会话cookie泄露漏洞
Vulnerability Description
Piwik（前称phpMyVisites）是一套基于PHP5和MySQL的开源网站访问统计系统。 Piwik 1.1之前版本中的Cookie.php没有为在https会话中的会话cookie设置安全标记。远程攻击者更容易通过截获http会话中cookie的传输获得cookie。
CVSS Information
N/A
Vulnerability Type
N/A