CVE-2025-8220

Summary: CVE-2025-8220 affects Engeman Web up to 12.0.0.2. The vulnerability is an SQL injection in the Password Recovery Page’s /Login/RecoveryPass, caused by manipulating the LanguageCombobox value in a Cookie. It is remotely exploitable and has public exploit disclosure. A fix is available in ...