PT-2025-45444 · Qumagie · Qumagie

Long Hà · Publicado 2025-11-07 · Atualizado 2025-11-10 · CVE-2025-52425

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QuMagie versions prior to 2.7.0

Description An SQL injection issue exists in QuMagie that could allow a remote attacker to execute unauthorized code or commands. The vulnerability can be exploited through SQL injection.

Recommendations Update to QuMagie version 2.7.0 or later.

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2026-00055

CVE-2025-52425

Produtos afetados

Qumagie

Referências · 7

• https://twitter.com/VulmonFeeds/status/1986887586942521564 · Publicação no Twitter
• https://t.me/CVEtracker/36780 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-52425 · Aviso do Fabricante
• https://qnap.com/en/security-advisory/qsa-25-33 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-00055 · Nota de Segurança
• https://twitter.com/CCBalert/status/1987907141118709760 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-52425 · Nota de Segurança