Vulnerabilities

TI-2025-28649 CVE-2025-44831 · GHSA-vghf-926w-cc55

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface.

HIGH 82

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00434 Published 2025-05-13 No fix listed CWE-89

TI-2025-28648 CVE-2025-44830 · GHSA-6q9m-6mf7-r8rx

HIGH 82

EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00466 Published 2025-05-12 No fix listed CWE-89

TI-2021-14815 CVE-2021-36605 · GHSA-cjcv-h2c2-pm28

LOW 25

engineercms 1.03 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0059 Published 2021-07-27 No fix listed CWE-79