135 matches found
CVE-2025-59397: Improper Neutralization of Special Elements used in an SQL Command
Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...
CVE-2025-59397
Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...
CVE-2025-59397
Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...
CVE-2025-59397
CVE-2025-59397 concerns Open Web Analytics (OWA) prior to 1.8.1. The vulnerability is a SQL injection in the owa_db.php component via a v[value] input, impacting potentially data confidentiality as per the CVSS metrics (Confidentiality Impact: Low; no other impacts). Affected product/version: Ope...
PT-2025-37722
Name of the Vulnerable Software and Affected Versions Open Web Analytics versions prior to 1.8.1 Description Open Web Analytics OWA before version 1.8.1 is susceptible to SQL injection. Recommendations Update to version 1.8.1 or later...
CVE-2022-24637
Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '...
Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics
CVE-2022-24637 Open Web Analytics 1.7.3 - Remote Code Executio...
Cross Site Scripting in Open Web Analytics on most statistics related pages
Description The makeJson method within the owatemplate class generates a JSON string in an unsafe manner. This method is utilized within the report.tpl file, where it receives parameters from the URL and generates a JSON string using them without properly sanitizing. Proof of Concept The...
Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics
Vulnerable Application Open Web Analytics OWA before 1.7.4...
Open Web Analytics Information Disclosure (CVE-2022-24637)
A command execution vulnerability exists in Open Web Analytics. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Open Web Analytics 1.7.3 Remote Code Execution
Exploit Title: Open Web Analytics 1.7.3 - Remote Code Execution RCE Date: 2022-08-30 Exploit Author: Jacob Ebben Vendor Homepage: https://www.openwebanalytics.com/ Software Link: https://github.com/Open-Web-Analytics Version: 1.7.4 Tested on: Linux CVE : CVE-2022-24637 import argparse import...
Open Web Analytics 1.7.3 - Remote Code Execution Exploit
Exploit Title: Open Web Analytics 1.7.3 - Remote Code Execution RCE Exploit Author: Jacob Ebben Vendor Homepage: https://www.openwebanalytics.com/ Software Link: https://github.com/Open-Web-Analytics Version: 1.7.4 Tested on: Linux CVE : CVE-2022-24637 import argparse import requests import base6...
Open Web Analytics 1.7.3 - Remote Code Execution
Exploit Title: Open Web Analytics 1.7.3 - Remote Code Execution RCE Date: 2022-08-30 Exploit Author: Jacob Ebben Vendor Homepage: https://www.openwebanalytics.com/ Software Link: https://github.com/Open-Web-Analytics Version: 1.7.4 Tested on: Linux CVE : CVE-2022-24637 import argparse import...
Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics
CVE-2022-24637 Open Web Analytics OWA...
Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics
CVE-2022-24637 Exploit for the Unauthenticated RCE in Open...
Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics
CVE-2022-24637 Exploit for the Unauthenticated RCE in Open...
Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics
AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026...
Information Disclosure
open-web-analytics/open-web-analytics is vulnerable to information disclosure. The vulnerability exists in fileCache.php due to the use of single quotes in '?php\n/' which allows an attacker to gain access to the sensitive information and perform code execution...
GHSA-PR9Q-V585-QV2W Improper Privilege Management in Open Web Analytics
Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...
Improper Privilege Management in Open Web Analytics
Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...