CVE-2025-8587CWE-89

Time-Based Blind SQLi in AKCE Software's SKSPro

High · published February 2, 2026

CVSS v3.1
8.6
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

⚡ An SQL injection vulnerability is lurking in SKSPro, potentially opening the door for attackers to manipulate your database with ease! 🔥 Think of it like a restaurant order where the chef doesn't check the ticket; if the waiter miswrites the instructions, they might end up serving something completely different from what's intended. In this case, a sneaky SQL command gets inserted where it shouldn't, leading to unexpected alterations in your database. An attacker could exploit this vulnerability to execute arbitrary SQL commands, allowing them to extract sensitive data, manipulate records, or even wipe your database clean! This could lead to a catastrophic loss of information and a devastating blow to your business operations.

Put simply

Think of it like a restaurant order where the chef doesn't check the ticket; if the waiter miswrites the instructions, they might end up serving something completely different from what's intended. In this case, a sneaky SQL command gets inserted where it shouldn't, leading to unexpected alterations in your database. This SQL injection flaw in SKSPro allows attackers to insert malicious SQL commands due to improper neutralization of special elements in user inputs, making it possible to bypass authentication and gain unauthorized access to the database.

What to do

An attacker could exploit this vulnerability to execute arbitrary SQL commands, allowing them to extract sensitive data, manipulate records, or even wipe your database clean! This could lead to a catastrophic loss of information and a devastating blow to your business operations. To secure your system, patch to the latest version of SKSPro immediately and ensure that all user inputs are properly sanitized. Implement prepared statements and parameterized queries to further mitigate the risk of SQL injections. You can tackle this vulnerability head-on! Follow the steps above, and you'll be well on your way to securing your application! 🛡️

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.3th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-02-02T12:50Z
EPSS history
Timeline
  • 02 FEB 12:50Z
    Time-Based Blind SQLi in AKCE Software's SKSPro
    cvelistv5