EUVD-2021-23202

Malware in sbrugna...

EUVD-2025-14659

Malicious code in bioql PyPI...

EUVD-2025-14302

Malicious code in bioql PyPI...

CVE-2021-36605

engineercms 1.03 is vulnerable to Cross Site Scripting XSS. There is no escaping in the nickname field on the user list page. When viewing this page, the JavaScript code will be executed in the user's browser...

CVE-2025-44831

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface...

CVE-2025-44830

EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface...

SQL Injection

Overview github.com/3xxx/engineercms/models is a data management platform. Affected versions of this package are vulnerable to SQL Injection through the /project/addproject interface. An attacker can manipulate database queries and access or modify data without proper authorization by injecting...

CVE-2025-44831

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface...

CVE-2025-44831

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface...

CVE-2025-44831

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface...

engineercms 安全漏洞

engineercms is an engineer knowledge management system by hotqin888 individual developer. A security vulnerability exists in engineercms versions 1.02 through 2.0.5, which originates from a SQL injection in the /project/addproject interface...

CVE-2025-44831: Improper Neutralization of Special Elements used in an SQL Command

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface...

CVE-2025-44831

The EngineerCMS data management platform (versions v1.02 through v2.0.5 ) is vulnerable to a SQL injection vulnerability within the /project/addproject interface. This flaw allows an attacker to inject malicious SQL commands to manipulate database queries, potentially leading to unauthorized acce...

PT-2025-20913 · Unknown · Engineercms

Name of the Vulnerable Software and Affected Versions: EngineerCMS versions 1.02 through 2.0.5 Description: The issue is a SQL injection vulnerability in the "/project/addproject" interface. This vulnerability allows for the injection of malicious SQL code, potentially leading to unauthorized...

CVE-2025-44831

EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface...

CVE-2025-44830

EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface...

CVE-2025-44830

EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface...

CVE-2025-44830

EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface...

engineercms 安全漏洞

engineercms is an engineer knowledge management system by hotqin888 individual developer. A security vulnerability exists in engineercms v1.02 to v2.0.5, which originates from a SQL injection in the /project/addprojtemplet interface...

PT-2025-20708 · Unknown · Engineercms

Name of the Vulnerable Software and Affected Versions: EngineerCMS versions 1.02 through 2.0.5 Description: The issue is a SQL injection vulnerability in the "/project/addprojtemplet" interface. This vulnerability allows for the injection of malicious SQL code, potentially leading to unauthorized...