what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Dana James Traversie

Open Web Analytics Pre-Auth SQL Injection

Posted Feb 17, 2014

Authored by Dana James Traversie | Site secureworks.com

Open Web Analytics (OWA) is open source web analytics software that can track and analyze how visitors use websites and applications. OWA is vulnerable to SQL injection that allows an attacker to execute arbitrary SQL statements in the context of the configured OWA database user without authenticating to the web application. This vulnerability affects Open Web Analytics version 1.5.4.

tags | exploit, web, arbitrary, sql injection

advisories | CVE-2014-1206

SHA-256 | 33fdc3435e7222254bf0a84debe464683ce87c332c33bea4a6d45b428d72c3e2

Download | Favorite | View