CVE-2025-60269 describes a critical SQL Injection vulnerability in JEEWMS 20250820, specifically within the exportXls function of the CgExportExcelController. This flaw, affecting huayi_tec jeewms, allows an unauthenticated attacker to execute arbitrary SQL commands. With a CVSS score of 9.4 (Critical), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to high impact on confidentiality, integrity, and limited availability. While there is no known active exploitation, Metasploit modules, Nuclei templates, or ExploitDB entries, the vulnerability has garnered significant community discussion with 11 mentions, indicating awareness among security researchers.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2025-08-20CPE matchmatch criteria | cpe:2.3:a:huayi-tec:jeewms:2025-08-20:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.