Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Quipux Clear all filters
TI-2025-34993 CVE-2025-55343 · GHSA-9jrh-6qjc-j6p4

Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks…

Priority MEDIUM 44

Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busqueda.php txt_depe_codi, busqueda/busqueda.php txt_usua_codi, anexos_lista.php radi_temp, Administracion/listas/for…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00547 Published 2025-11-05 No fix listed CWE-74
TI-2025-34992 CVE-2025-55342 · GHSA-xx43-6j8m-vx2f

Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the…

Priority LOW 30

Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users via the Administracion/usuarios/cambiar_password_olvido_validar.php txt_login para…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00261 Published 2025-11-05 No fix listed CWE-200