Openwebanalytics
7 CVEs across 2 Openwebanalytics products. Browse Openwebanalytics vulnerabilities, severities, and proof-of-concept exploits.
Openwebanalytics products with known CVEs
Openwebanalytics CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-59397 | Medium | 5.0 | 2025-09-15 | Open Web Analytics (OWA) before 1.8.1 allows owa_db.php v[value] SQL injection. |
CVE-2022-24637 | Critical | 9.8 | 2022-03-18 | Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privilege… |
CVE-2014-2294 | Critical | 9.8 | 2018-04-17 | Open Web Analytics (OWA) before 1.5.7 allows remote attackers to conduct PHP object injection attacks via a crafted serialized object in the owa_event paramete… |
CVE-2014-1457 | High | 8.8 | 2018-03-20 | Open Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it easier for remote attackers to bypass a CSRF protection mechanis… |
CVE-2014-1456 | | | 2014-03-01 | Cross-site scripting (XSS) vulnerability in the login page in Open Web Analytics (OWA) before 1.5.6 allows remote attackers to inject arbitrary web script or H… |
CVE-2014-1206 | | | 2014-01-15 | SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers to execute arbitrary SQL commands via t… |
CVE-2010-2677 | | | 2010-07-08 | PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is disabled and register_globals is enabled… |
CVE-2010-2676 | | | 2010-07-08 | Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers to read arbitrary files via directory… |