Skip to content
OpenAdvisories

Product · Anapi Group

H6Web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-1270

    Insecure direct object reference (IDOR) vulnerability in H6Web

    Insecure direct object reference (IDOR) vulnerability in Anapi Group's h6web, allows an authenticated attacker to access other users' information by making a POST request and modifying the “pkrelated” parameter in the “/h6web/ha_datos_hermano.php” endpoint to…

    Anapi Group H6Web