(#Two vulnerabilities have been identified in Piwik.##- CVE-2015-7815: arbitrary file inclusion in viewDataTable. A remote attacker can exploit it to include PHP files and potentially execute arbitrary commands. Only PHP versions 5.4.24 or 5.5.8 and earlier are vulnerable.##- CVE-2015-7816: PHP object injection in DisplayTopKeywords. A remote attacker can exploit it to execute a server-side request forgery attack. Only configurations allowing to edit the $api variable via HTTP headers are vulnerable.)
