GCVE - cpe:2.3:a:openwebanalytics:open_web_analytics:1.2.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openwebanalytics:open_web_analytics:1.2.3:*:*:*:*:*:*:*

part: a version: 1.2.3 update: *

Vendor	Openwebanalytics (`91fe3d2a-68a8-5334-8113-1db2ea0e7b21`)
Product	Open Web Analytics (`97af7302-dfe4-5422-9a46-655789e4b92c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:docker/capino/owa`	purl2cpe	2026-06-01 10:16:42.630035
`pkg:github/open-web-analytics/open-web-analytics`	purl2cpe	2026-06-01 10:16:42.630037

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-1456`	vulnerable	2026-06-08 05:05:24.671558	Details available Cross-site scripting (XSS) vulnerability in the login page in Open Web Analytics (OWA) before 1.5.6 allows remote attackers to inject arbitrary web script or HTML via the owa_user_id parameter to index.php. Published: 2014-02-28T17:00:00.000Z Updated: 2024-08-06T09:42:35.454Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/65571 http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2014-004 http://www.openwebanalytics.com/?p=384 https://exchange.xforce.ibmcloud.com/vulnerabilities/91124 http://secunia.com/advisories/56885	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1206`	vulnerable	2026-06-08 05:05:15.920056	Details available SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owa_email_address parameter in a base.passwordResetRequest action to index.php. Published: 2014-01-15T16:00:00.000Z Updated: 2024-08-06T09:34:40.571Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/64774 http://www.exploit-db.com/exploits/31738 http://secunia.com/advisories/56350 http://www.securityfocus.com/archive/1/531105/100/0/threaded http://www.secureworks.com/advisories/SWRX-2014-001/SWRX-2014-001.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2677`	vulnerable	2026-06-08 04:55:09.599503	Details available PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter. NOTE: some of these details are obtained from third party information. Published: 2010-07-08T22:00:00.000Z Updated: 2024-08-07T02:39:38.025Z Open on db.gcve.eu Reference links http://www.openwebanalytics.com/?p=87 http://www.exploit-db.com/exploits/11903 http://packetstormsecurity.org/1003-exploits/owa123-lfirfi.txt http://secunia.com/advisories/39153 http://www.ITSecTeam.com/en/vulnerabilities/vulnerability26.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2676`	vulnerable	2026-06-08 04:55:09.599027	Details available Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers to read arbitrary files via directory traversal sequences in the (1) owa_action and (2) owa_do parameters. Published: 2010-07-08T22:00:00.000Z Updated: 2024-08-07T02:39:37.777Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/11903 http://packetstormsecurity.org/1003-exploits/owa123-lfirfi.txt http://www.ITSecTeam.com/en/vulnerabilities/vulnerability26.htm http://www.openwebanalytics.com/?p=87 https://exchange.xforce.ibmcloud.com/vulnerabilities/57240	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Open Web Analytics (OWA) 1.2.3

Notes

PURL mappings

Vulnerability references

Contribute