PatchTheCVE: quipuxhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-55343: Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busquedahttps://patchthecve.com/cve/CVE-2025-55343.htmlhttps://patchthecve.com/cve/CVE-2025-55343.htmlWed, 17 Jun 2026 09:41:42 +0000CRITICAL 9.9: Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busqueda.php txt_depe_codi, busqueda/busqueda.php txt_usua_codi, anexos_lista.php radi_temp, Administracion/listas/formArea_ajax.php codDepe, Administracion/listas/formDepeHijo_ajax.php codDepe, AdmCVE-2025-55342: Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification numbhttps://patchthecve.com/cve/CVE-2025-55342.htmlhttps://patchthecve.com/cve/CVE-2025-55342.htmlWed, 17 Jun 2026 09:41:41 +0000MEDIUM 5.3: Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users via the Administracion/usuarios/cambiar_password_olvido_validar.php txt_login parameter.CVE-2025-55341: Cross Site Scripting vulnerability in Quipux 4.0.1 through e1774ac allows anexos/anexos_nuevo.php asocImgRad.https://patchthecve.com/cve/CVE-2025-55341.htmlhttps://patchthecve.com/cve/CVE-2025-55341.htmlWed, 17 Jun 2026 09:41:41 +0000MEDIUM 6.5: Cross Site Scripting vulnerability in Quipux 4.0.1 through e1774ac allows anexos/anexos_nuevo.php asocImgRad.