medium6.5
CVE-2025-60266
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vuln…
Impact
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bestfeng | Xckk | Version 9.6 |