PatchTheCVE: bestfenghttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-60267: In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securelhttps://patchthecve.com/cve/CVE-2025-60267.htmlhttps://patchthecve.com/cve/CVE-2025-60267.htmlWed, 17 Jun 2026 09:49:37 +0000MEDIUM 6.5: In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL injection vulnerability.CVE-2025-60266: In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not sechttps://patchthecve.com/cve/CVE-2025-60266.htmlhttps://patchthecve.com/cve/CVE-2025-60266.htmlWed, 17 Jun 2026 09:49:37 +0000MEDIUM 6.5: In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability.CVE-2025-60265: In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securehttps://patchthecve.com/cve/CVE-2025-60265.htmlhttps://patchthecve.com/cve/CVE-2025-60265.htmlWed, 17 Jun 2026 09:49:37 +0000MEDIUM 6.5: In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injection vulnerability.