PatchTheCVEengineercms project vulnerabilities
Recent CVEs affecting engineercms project products. 2 tracked.
engineercms project has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-05-13. Highest priority: CVE-2025-44831 (score 54/100).
- CVE-2025-44831 CRITICAL 9.8 UPGRADE EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface.
- CVE-2025-44830 CRITICAL 9.8 UPGRADE EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface.
FAQ
How do I fix engineercms project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is engineercms project being exploited right now?
None of the tracked engineercms project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which engineercms project CVE should I patch first?
CVE-2025-44831 currently ranks highest (54/100): EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface..