CVE-2025-44830

EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2025-05-12

Last modified

2025-05-12

Weaknesses

CWE-89

Affected products

• Engineercms (Engineercms Project)

References

• https://gist.github.com/LTLTLXEY/e00ec21b730742ef432a7a560cd9b70a
• https://github.com/3xxx/engineercms/issues/90