Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-7075

itsourcecode Construction Management System locations.php sql injection

Description

A vulnerability was found in itsourcecode Construction Management System 1.0. This issue affects some unknown processing of the file /locations.php. Performing a manipulation of the argument address results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

itsourcecode Construction Management System

  • 1.0affected

References