TI-2025-12076 CVE-2025-13209 · GHSA-2rmp-qgp4-wg66
bestfeng oa_git_free WorkflowPredefineController.java updateWriteBack xml external entity reference
Priority MEDIUM 57
A weakness has been identified in bestfeng oa_git_free up to 9.5.
Vulnerabilities
4 records
TI-2025-37621 CVE-2025-60267 · GHSA-8hxj-rmq7-4462
In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in…
Priority HIGH 70
In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL injection vulnerability.
TI-2025-37620 CVE-2025-60266 · GHSA-w67w-c48m-p6rf
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in…
Priority HIGH 70
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability.
TI-2025-37619 CVE-2025-60265 · GHSA-4rxc-gf77-j5j9
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in…
Priority HIGH 70
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnerability.