CVE-2010-2676 Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers to read arbitrary files via directory traversal sequences in the (1) owa_action...
MediumCVSS 5.0
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers to read arbitrary files via directory traversal sequences in the (1) owa_action and (2) owa_do parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openwebanalytics open web analytics | = 1.2.3 | No fix listed |
References
- packetstormsecurity.org exploit
- www.ITSecTeam.com exploit
- 11903 exploit
- www.openwebanalytics.com patch vendor-advisory
- owa-index-file-include(57240) vdb-entry