CVE-2014-1206

HOCH 7.5CVE-2014-1206 · Published 15/01/2014 · updated 17/06/2026

Kurz gesagt

CVE-2014-1206 ist eine Schwachstelle (HOCH (CVSS 7.5)) in open web analytics (openwebanalytics).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.5%, höher als bei 84.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
open web analytics openwebanalytics	`= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.1.0= 1.1.1= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.3.0= 1.3.1= 1.4.0= 1.4.1= 1.5.0= 1.5.1= 1.5.2= 1.5.3≤ 1.5.4`	No fix yet

Description

SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owa_email_address parameter in a base.passwordResetRequest action to index.php.

References

secunia.com/advisories/56350 · Vendor Advisory
wiki.openwebanalytics.com/index.php · Vendor Advisory
exploit-db.com/exploits/31738
secureworks.com/advisories/SWRX-2014-001/SWRX-2014-001.pdf · Exploit
securityfocus.com/archive/1/531105/100/0/threaded
securityfocus.com/bid/64774 · Exploit

Weitere Schwachstellen in open web analytics

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

open web analytics

openwebanalytics

= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.1.0= 1.1.1= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.3.0= 1.3.1= 1.4.0= 1.4.1= 1.5.0= 1.5.1= 1.5.2= 1.5.3≤ 1.5.4

No fix yet

Weitere Schwachstellen in open web analytics

Alle anzeigen →