A backdoor has been added to the web server analytics Piwik which allows attackers to take control of a system. The Backdoor is in 'core/Loader.php' and create also the files: lic.log core/DataTable/Filter/Megre.php

See the References.

• http://forum.piwik.org/read.php?2
• http://piwik.org/blog/2012/11/security-report-piwik-org-webserver-hacked-for-a-few-hours-on-2012-nov-26th/

---

Updated on 2015-03-25