H6Web vulnerabilities

1 known vulnerability in H6Web from Anapi Group. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  H6Web: Authorization Bypass Through User-Controlled Key

  CVE-2025-1270Feb 13, 2025Anapi Group

  Insecure direct object reference (IDOR) vulnerability in Anapi Group's h6web, allows an authenticated attacker to access other users' information by making a POST request and modifying the “pkrelated” parameter in the “/h6web/ha_datos_hermano.php” endpoint to