CVE-2025-44830

Description

EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface.

PUBLISHED Reserved 2025-04-22 | Published 2025-05-12 | Updated 2025-05-12 | Assigner mitre

References

github.com/3xxx/engineercms/issues/90 exploit

github.com/3xxx/engineercms/issues/90

gist.github.com/LTLTLXEY/e00ec21b730742ef432a7a560cd9b70a

cve.org (CVE-2025-44830)

nvd.nist.gov (CVE-2025-44830)

Download JSON