CVE-2014-2294 | BDVDB-2026-99406 Detail

Description#

Open Web Analytics (OWA) before 1.5.7 allows remote attackers to conduct PHP object injection attacks via a crafted serialized object in the owa_event parameter to queue.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://secuniaresearch.flexerasoftware.com/advisories/56999
http://www.openwebanalytics.com/?p=388
https://secuniaresearch.flexerasoftware.com/secunia_research/2014-3/
http://karmainsecurity.com/KIS-2014-03
https://www.securityfocus.com/bid/66076

Exploit#

No public exploit known

History#

Version 12018-04-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.