Skip to content
OpenAdvisories

Product · 3xxx

engineercms

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-111652

    Engineercms through 2.0.5 Missing Authorization via AttachController.Attachment

    Engineercms through 2.0.5 contains a missing authorization vulnerability in AttachController.Attachment that allows unauthenticated attackers to download project image and video attachments. Attackers can request known or derived /attachment/* paths for .jpg,…

    3xxx engineercms