NetSight
critical9.8

CVE-2025-52425

An SQL injection vulnerability has been reported to affect QuMagie.

Impact

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later

Affected products

VendorProductAffected versions
QnapQumagie
from 2.6.0 before 2.7.0

Weakness classification

References