All packages
itsourcecode Construction Management System vulnerabilities
3 known CVE vulnerabilities in itsourcecode Construction Management System, translated and rated.
- CVE-2026-5823Medium
itsourcecode Construction Management System 1.0 has SQL Injection in /borrowed_tool_report.php via the Home argument. Remote attack possible, exploit public.
- CVE-2026-5719Medium
SQL Injection vulnerability in itsourcecode Construction Management System 1.0. An unknown function in /borrowedtool.php allows manipulation of the code argument, leading to SQL injection. Remote attack possible. Exploit published.
- CVE-2026-5675Medium
In itsourcecode Construction Management System 1.0, the file /borrowed_tool.php contains an SQL injection vulnerability via the emp parameter. An attacker can remotely manipulate this parameter, leading to unauthorized database access.