CVE-2014-1456: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login page in Open Web Analytics OWA before 1.5.6 allows remote attackers to inject arbitrary web script or HTML via the owauserid parameter to index.php...

PT-2014-4192

Name of the Vulnerable Software and Affected Versions Open Web Analytics OWA versions prior to 1.5.6 Description A cross-site scripting XSS issue exists in the login page, allowing remote attackers to inject arbitrary web script or HTML via the owa user id parameter to "index.php". Recommendation...

Open Web Analytics 1.5.4 - owa_email_address SQL Injection

Open Web Analytics 1.5.4 - owaemailaddress SQL Injection """ Dell SecureWorks Security Advisory SWRX-2014-001 Open Web Analytics Pre-Auth SQL Injection Advisory Information Title: Open Web Analytics Pre-Auth SQL Injection Advisory ID: SWRX-2014-001 Advisory URL:...

Open Web Analytics 1.5.4 Pre-Auth SQL Injection Vulnerability

Open Web Analytics OWA is open source web analytics software that can track and analyze how visitors use websites and applications. OWA is vulnerable to SQL injection that allows an attacker to execute arbitrary SQL statements in the context of the configured OWA database user without...

Open Web Analytics 1.5.4 - 'owa_email_address' SQL Injection

""" Dell SecureWorks Security Advisory SWRX-2014-001 Open Web Analytics Pre-Auth SQL Injection Advisory Information Title: Open Web Analytics Pre-Auth SQL Injection Advisory ID: SWRX-2014-001 Advisory URL: http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2014-001/ Date...

Open Web Analytics Pre-Auth SQL Injection

Dell SecureWorks Security Advisory SWRX-2014-001 Open Web Analytics Pre-Auth SQL Injection Advisory Information Title: Open Web Analytics Pre-Auth SQL Injection Advisory ID: SWRX-2014-001 Advisory URL: http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2014-001/ Date published:...

Open Web Analytics < 1.5.5 SQLi Vulnerability - Active Check

Open Web Analytics is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Open Web Analytics (OWA) Detection (HTTP)

HTTP based detection of Open Web Analytics OWA. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-1206

SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...

Sql injection

SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...

CVE-2014-1206

SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...

CVE-2014-1206

SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...

CVE-2014-1206

Open Web Analytics (OWA)

CVE-2014-1206: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...

PT-2014-4012

Name of the Vulnerable Software and Affected Versions Open Web Analytics OWA versions prior to 1.5.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the owa email address parameter in a base.passwordResetRequest action to "index.php"...

Open Web Analytics 'owa_email_address'参数SQL注入漏洞

BUGTRAQ ID: 64774 CVECAN ID: CVE-2014-1206 Open Web Analytics是一个开源的网站流量统计系统。 Open Web Analytics 1.5.4及更早版本没有正确过滤index.php的"owaemailaddress"参数（"owado"设置为"base.passwordResetForm"，"owaaction"设置为"base.passwordResetRequest"），在实现上存在安全漏洞，可导致注入任意SQL代码。 0 Open Web Analytics Open Web Analytics = 1.5.4 Open...

Chameleon Botnet Stealing $6M a Month in Fraudulent Ad Clicks

The Chameleon botnet continues to steal millions of dollars from online advertisers through fraudulent clicks made by malware. First discovered in late February, researchers at British-based Web analytics firm spider.io say more than 120,000 Microsoft Windows machines — the overwhelming majority...

Microsoft SharePoint Web Analytics Cross-Site Scripting (MS13-024; CVE-2013-0083)

An elevation of privilege vulnerability exists in Microsoft SharePoint Server. An attacker who successfully exploited this vulnerability could potentially issue SharePoint commands in the context of an administrative user on the site. The vulnerability is caused when Microsoft SharePoint Server...

Piwik Detection

The remote web server is running Piwik, a web analytics tool used for detailed reporting of website analytics. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63078; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Hack Puts Spotlight on Malware's Long Tail: Parked Domains

They’re the dusty corners of the Web: so-called “parked” domains. But these little trafficked sites are attracting the attention of security experts, who say that it’s time for hosting firms and others that profit from them to clean up malware infections that may be exposing millions of Web users...