medium6.5
CVE-2025-60267
In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL injection vulnerab…
Impact
In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL injection vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bestfeng | Xckk | Version 9.6 |