Engineercms Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Engineercms Project records in CISA KEV

No Engineercms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2025-28649 CVE-2025-44831 · GHSA-vghf-926w-cc55

HIGH 82

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00434 Published 2025-05-13 No fix listed CWE-89

TI-2025-28648 CVE-2025-44830 · GHSA-6q9m-6mf7-r8rx

HIGH 82

EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00466 Published 2025-05-12 No fix listed CWE-89

TI-2021-14815 CVE-2021-36605 · GHSA-cjcv-h2c2-pm28

LOW 25

engineercms 1.03 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0059 Published 2021-07-27 No fix listed CWE-79