Vendors / Quipux Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Quipux records in CISA KEV No Quipux vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busqueda.php txt_depe_codi, busqueda/busqueda.php txt_usua_codi, anexos_lista.php radi_temp, Administracion/listas/for…
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00547 · Published 2025-11-05 · No fix listed CWE-74
Priority LOW 34
Cross Site Scripting vulnerability in Quipux 4.0.1 through e1774ac allows anexos/anexos_nuevo.php asocImgRad.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00222 · Published 2025-11-05 · No fix listed CWE-79
Priority LOW 30
Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users via the Administracion/usuarios/cambiar_password_olvido_validar.php txt_login para…
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00261 · Published 2025-11-05 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
1 0 2 0 0
