CVE-2025-60269: SQL Injection
Published Oct 10, 2025
·Updated
JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file.
Affected Software
2 affected components
Jeewms JeeWMS
Huayi-tec Jeewms=2025-08-20
Event History
Oct 10, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-60269?
CVE-2025-60269 is classified as a critical vulnerability due to the potential for SQL Injection.
2
How do I fix CVE-2025-60269?
To fix CVE-2025-60269, inputs to the exportXls function should be properly sanitized to prevent SQL Injection.
3
What software is affected by CVE-2025-60269?
CVE-2025-60269 affects JEEWMS versions 20250820 and potentially earlier releases.
4
What type of vulnerability is CVE-2025-60269?
CVE-2025-60269 is an SQL Injection vulnerability that can allow attackers to execute arbitrary SQL commands.
5
Where in the code is CVE-2025-60269 located?
CVE-2025-60269 is located in the exportXls function within the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file.