CVE-2025-3009
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Mar 31, 2025
Updated: Apr 1, 2025
CWE ID 79
Summary
CVE-2025-3009 is a newly disclosed critical vulnerability that affects Jinher Network OA C6. The issue lies within an unknown functionality of the file /C6/JHSoft.Web.NetDisk/NetDiskProperty.aspx. An attacker can exploit this vulnerability by manipulating the argument ID, which results in SQL injection. This attack can be launched remotely, making the vulnerability a significant threat to affected systems. The exploit has been made public, increasing the risk of widespread exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SquirrelMail