← Back

Engineercms Project

engineercms_project

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Engineercms
engineercms
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-44831
1Engineercms Project
1Engineercms
Jun 17, 2026
May 13, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface.
CVE-2025-44830
1Engineercms Project
1Engineercms
Jun 17, 2026
May 12, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface.
CVE-2021-36605
1Engineercms Project
1Engineercms
Jun 17, 2026
Jul 30, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
engineercms 1.03 is vulnerable to Cross Site Scripting (XSS). There is no escaping in the nickname field on the user list page. When viewing this page, the JavaScript code will be executed in the user's browser.