Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4rxc-gf77-j5j9

Опубликовано: 09 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnerability.

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnerability.

EPSS

Процентиль: 11%
0.00037
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 6.5
nvd
4 месяца назад

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnerability.

EPSS

Процентиль: 11%
0.00037
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89