135 matches found
EUVD-2026-74161
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
CVE-2026-86810
Open-Web-Analytics (up to 1.9.1) contains an improper authentication vulnerability in the checkCapabilityAndAuthenticateUser function within Core/Controller.php (Controller component). A remote, unauthenticated attacker can manipulate this function to bypass authentication checks. The CVSS 3.1 sc...
CVE-2026-86810 Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
PT-2026-88457
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
CVE-2026-86810: Improper Authentication
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
EUVD-2014-1532
Malware in sbrugna...
EUVD-2010-2681
Malware in sbrugna...
EUVD-2010-2680
Malware in sbrugna...
EUVD-2014-1533
Malware in sbrugna...
EUVD-2014-2332
Malware in sbrugna...
EUVD-2014-1287
Malware in sbrugna...
EUVD-2025-29208
Malicious code in bioql PyPI...
CVE-2025-59397
Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...
Open Web Analytics Server is vulnerable to SQL Injection
Open Web Analytics OWA before 1.8.1 allows SQL injection...
GHSA-6W8R-XGQQ-QG6G Open Web Analytics Server is vulnerable to SQL Injection
Open Web Analytics OWA before 1.8.1 allows SQL injection...
SQL Injection
Overview open-web-analytics/open-web-analytics is an open source analytics framework. Affected versions of this package are vulnerable to SQL Injection via the query process. An attacker can access sensitive information from the database by injecting crafted SQL statements. Remediation Upgrade...
CVE-2025-59397
Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...
CVE-2025-59397
CVE-2025-59397 concerns Open Web Analytics (OWA) prior to 1.8.1. The vulnerability is a SQL injection in the owa_db.php component via a v[value] input, impacting potentially data confidentiality as per the CVSS metrics (Confidentiality Impact: Low; no other impacts). Affected product/version: Ope...
