Summary
A backdoor has been added to the web server analytics Piwik which allows attackers to take control of a system.
The Backdoor is in 'core/Loader.php' and create also the files:
lic.log
core/DataTable/Filter/Megre.php
Solution
See the References.
References
Severity
Classification
-
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- AlienVault OSSIM Multiple Remote Code Execution Vulnerabilities
- AlienVault Open Source SIEM (OSSIM) 'timestamp' Parameter Directory Traversal Vulnerability
- Apache Solr XML External Entity(XXE) Vulnerability-02 Jan-14
- ApPHP MicroBlog Remote Code Execution Vulnerability
- AWStats Totals 'sort' Parameter Remote Command Execution Vulnerabilities