Approved changes feed: RSS · Atom
cpe:2.3:a:anapi_group:h6web:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Anapi Group (1c4c515a-5398-5e1d-a6cb-868edbec83e6) |
|---|---|
| Product | H6Web (141c1bf6-ca1f-543d-b125-d4d1b5c12b09) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-1271 |
vulnerable | 2026-06-08 07:08:36.054871 |
Reflected Cross-Site Scripting (XSS) vulnerability in H6Web
MEDIUM (6.1)
Reflected Cross-Site Scripting (XSS) in Anapi Group's h6web. This security flaw could allow an attacker to inject malicious JavaScript code into a URL. When a user accesses that URL, the injected code is executed in their browser, which can result in the theft of sensitive information, identity theft or the execution of unauthorised actions on behalf of the affected user.
Published: 2025-02-13T12:49:40.807Z
Updated: 2025-02-13T14:22:02.811Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1270 |
vulnerable | 2026-06-08 07:08:36.053444 |
Insecure direct object reference (IDOR) vulnerability in H6Web
CRITICAL (9.1)
Insecure direct object reference (IDOR) vulnerability in Anapi Group's h6web, allows an authenticated attacker to access other users' information by making a POST request and modifying the “pkrelated” parameter in the “/h6web/ha_datos_hermano.php” endpoint to refer to another user. In addition, the first request could also allow the attacker to impersonate other users. As a result, all requests made after exploitation of the IDOR vulnerability will be executed with the privileges of the impersonated user.
Published: 2025-02-13T12:48:15.216Z
Updated: 2025-02-13T14:22:21.210Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.