Open Web Analytics Server is vulnerable to SQL Injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-59397 · ADVISORY
• Open-Web-Analytics/Open-Web-Analytics commit 1e55315 · WEB
• Open-Web-Analytics/Open-Web-Analytics · PACKAGE
• Open-Web-Analytics/Open-Web-Analytics · WEB
• Open-Web-Analytics/Open-Web-Analytics release 1.8.1 · WEB
• seclists.org/fulldisclosure/2025/Oct/5 · WEB
• openwebanalytics.com · WEB
• seralys.com/research/CVE-2025-59397.txt · WEB
• seclists.org/fulldisclosure/2025/Oct/5

open-web-analytics/open-web-analytics のその他の脆弱性

• CVE-2022-24637緊急 9.8Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to g…