medium6.5
CVE-2025-60265
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnera…
Impact
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bestfeng | Xckk | Version 9.6 |