Package · Packagist

open-web-analytics/open-web-analytics

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.0

CVE-2025-59397

Open Web Analytics Server is vulnerable to SQL Injection

Open Web Analytics (OWA) before 1.8.1 allows owa_db.php v[value] SQL injection.

Open Web Analytics Open Web Analytics open-web-analytics/open-web-analytics Packagist

Sep 15, 2025
Critical 9.8

CVE-2022-24637 Public exploit Scanner template EPSS 99%

Improper Privilege Management in Open Web Analytics

Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intend…

open-web-analytics/open-web-analytics Packagist

Mar 18, 2022