CVE:CVE-2010-1453
CNNVD:CNNVD-201005-105
Piwik（前称phpMyVisites）是一套基于PHP5和MySQL的开源网站访问统计系统。
Piwik的登录表单存在跨站脚本攻击(XSS)漏洞，远程攻击者可通过form_url参数注入任意网页脚本和HTML。
solution:Upgrade matomo matomo to a higher version than 0.1.6,0.1.7,0.1.8,0.1.9,0.1.10,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.2.9,0.2.10,0.2.11,0.2.12,0.2.13,0.2.14,0.2.16,0.2.17,0.2.18,0.2.19,0.2.20,0.2.22,0.2.23,0.2.24,0.2.25,0.2.26,0.2.27,0.2.28,0.2.29,0.2.30,0.2.31,0.2.32,0.2.33,0.2.34,0.4:rc1,0.4:rc2,0.4:rc3,0.4.1:rc1,0.4.4,0.4.5,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,and avoid the version 0.1.6,0.1.7,0.1.8,0.1.9,0.1.10,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.2.9,0.2.10,0.2.11,0.2.12,0.2.13,0.2.14,0.2.16,0.2.17,0.2.18,0.2.19,0.2.20,0.2.22,0.2.23,0.2.24,0.2.25,0.2.26,0.2.27,0.2.28,0.2.29,0.2.30,0.2.31,0.2.32,0.2.33,0.2.34,0.4:rc1,0.4:rc2,0.4:rc3,0.4.1:rc1,0.4.4,0.4.5,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5; Upgrade piwik piwik to a higher version than 0.5.5:rc1,0.5.5:rc2,and avoid the version 0.5.5:rc1,0.5.5:rc2