AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-12465

UNKNOWN · CVSS N/A EPSS 0.27%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-12-02 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. It involves a SQL injection risk.

CVE
CVE-2025-12465
Severity
UNKNOWN
CVSS
N/A
EPSS
0.27%

Original NVD Description

A Blind SQL injection vulnerability has been identified in QuickCMS. Improper neutralization of input provided by a high-privileged user into aFilesDelete allows for Blind SQL Injection attacks. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.