Skip to content
OpenAdvisories

Vendor

Anapi Group

2 known vulnerabilities.

Products

H6Web 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-1270

    Insecure direct object reference (IDOR) vulnerability in H6Web

    Insecure direct object reference (IDOR) vulnerability in Anapi Group's h6web, allows an authenticated attacker to access other users' information by making a POST request and modifying the “pkrelated” parameter in the “/h6web/ha_datos_hermano.php” endpoint to…

    Anapi Group H6Web