CVE-2025-59397

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

Open Web Analytics (OWA) before 1.8.1 allows owa_db.php v[value] SQL injection.

Metrics

CVSS 3.1 5.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
openwebanalyticsOpen Web Analytics< 1.8.1

References

Timeline

Published
Sep 15, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-593983.1The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, becauCVE-2025-593993.1libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation.CVE-2025-59405.4The Osom Blocks – Custom Post Type listing block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class_name’ paraCVE-2025-594025.4Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL CVE-2025-594039.8The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication. It is responsibCVE-2025-594047.5Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android VeriCVE-2025-594057.5The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Falcon and Sparrow License PlateCVE-2025-594066.2The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers CVE-2025-594079.8The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow LicensCVE-2025-594087.3Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled. This allows an attacker to flash modifCVE-2025-594097.5Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartexCVE-2025-59412.0Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a craf
CVE-2025-59397: Medium severity, CVSS 5.0 | Vulnix