CVE-2025-59397: Improper Neutralization of Special Elements used in an SQL Command

Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...

CVE-2014-1457: Cross-Site Request Forgery (CSRF)

Open Web Analytics OWA before 1.5.6 improperly generates random nonce values, which makes it easier for remote attackers to bypass a CSRF protection mechanism by leveraging knowledge of an OWA user name...