| Package | Affected versions | Patched versions |
|---|---|---|
| quipux | = 4.0.1 |
Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users via the Administracion/usuarios/cambiar_password_olvido_validar.php txt_login parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free