CVE-2025-60265

Description

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnerability.

PUBLISHED Reserved 2025-09-26 | Published 2025-10-09 | Updated 2025-10-09 | Assigner mitre

References

gitee.com/bestfeng/xckk

github.com/int-ux/report/issues/1

cve.org (CVE-2025-60265)

nvd.nist.gov (CVE-2025-60265)

Download JSON