CVE-2022-24637 | BDVDB-2026-172196 Detail

Description#

Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intended "<?php sequence) aren't handled by the PHP interpreter.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-03-18Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.