CVE-2014-2294

概要

参考情報

• karmainsecurity.com/KIS-2014-03 · Third Party Advisory
• openwebanalytics.com · Patch
• secuniaresearch.flexerasoftware.com/advisories/56999 · Permissions Required
• secuniaresearch.flexerasoftware.com/secunia_research/2014-3 · Third Party Advisory
• securityfocus.com/bid/66076 · Third Party Advisory

open web analytics のその他の脆弱性

• CVE-2022-24637緊急 9.8Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to g…
• CVE-2014-1457高 8.8Open Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it easier for remote attackers to bypass a CSRF …
• CVE-2014-1456中 4.3Cross-site scripting (XSS) vulnerability in the login page in Open Web Analytics (OWA) before 1.5.6 allows remote attackers to inject arbitr…
• CVE-2014-1206高 7.5SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers to execute arbitrary…
• CVE-2010-2677中 5.1PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is disabled and register_g…