CVE-2010-2676

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.86%

Published

Jul 8, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBOpen Web Analytics 1.2.3 - Multiple File Inclusions TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers to read arbitrary files via directory traversal sequences in the (1) owa_action and (2) owa_do parameters.

Weaknesses (CWE)

CWE-22

Affected Products (1)

openwebanalytics · open_web_analyticsvulnerable

References (10)

http://packetstormsecurity.org/1003-exploits/owa123-lfirfi.txt

Exploit

http://www.ITSecTeam.com/en/vulnerabilities/vulnerability26.htm

Exploit

http://www.exploit-db.com/exploits/11903

Exploit

http://www.openwebanalytics.com/?p=87

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/57240

http://packetstormsecurity.org/1003-exploits/owa123-lfirfi.txt

Exploit

http://www.ITSecTeam.com/en/vulnerabilities/vulnerability26.htm

Exploit

http://www.exploit-db.com/exploits/11903

Exploit

http://www.openwebanalytics.com/?p=87

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/57240

KEV Catalog EPSS Scores Vendors All CVEs