CVE-2025-29892

🗓️ 06 Jun 2025 15:53:58Reported by qnapType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 46 Views

SQL injection vulnerability in Qsync Central allows unauthorized code execution by remote attackers.

Reporter	Title	Published	Views	Family All 8
CNNVD	QNAP Qsync Central SQL注入漏洞	6 Jun 202500:00	–	cnnvd
CNVD	QNAP Qsync Central SQL Injection Vulnerability	23 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-29892 Qsync Central	6 Jun 202515:53	–	cvelist
EUVD	EUVD-2025-17342	3 Oct 202520:07	–	euvd
NVD	CVE-2025-29892	6 Jun 202516:15	–	nvd
Positive Technologies	PT-2025-24305 · Unknown · Qsync Central	6 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-29892	8 Jun 202516:01	–	redhatcve
Vulnrichment	CVE-2025-29892 Qsync Central	6 Jun 202515:53	–	vulnrichment

NVD

Node

qnap qsync_centralRange4.5.0.3–4.5.0.6

[
  {
    "defaultStatus": "unaffected",
    "product": "Qsync Central",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "4.5.0.6 ( 2025/03/20 )",
        "status": "affected",
        "version": "4.5.x.x",
        "versionType": "custom"
      }
    ]
  }
]