CVE-2025-29894 — Qsync Central
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthori…
Published: 2025-08-29 · CVSS: 7.5 · CVSS 4.0
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7