CVE-2022-24637
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 99%
da publicação à arma165 dias
Publicada no NVD18 de mar.
1ª PoC+165d
metasploit18 de mar.
probabilidade de exploração
99%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
9 exploit(s) público(s)
Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intended "<?php sequence) aren't handled by the PHP interpreter.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 9
exploitdbwww.exploit-db.com/exploits/51026não verificadogithubgithub.com/hupe1980/CVE-2022-24637★ 5githubgithub.com/Lay0us/CVE-2022-24637★ 5githubgithub.com/Pflegusch/CVE-2022-24637★ 4githubgithub.com/icebreack/CVE-2022-24637★ 4githubgithub.com/0xM4hm0ud/CVE-2022-24637★ 3githubgithub.com/0xRyuk/CVE-2022-24637★ 1cve_referencepacketstormsecurity.com/files/169811/Open-Web-Analytics-1.7.3-Remote-Code-Execution.htmlnão verificadocve_referencepacketstormsecurity.com/files/171389/Open-Web-Analytics-1.7.3-Remote-Code-Execution.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/169811/Open-Web-Analytics-1.7.3-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/171389/Open-Web-Analytics-1.7.3-Remote-Code-Execution.htmlhttps://devel0pment.de/?p=2494https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.7.4