CVE-2024-50972

A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrowid parameter...

PT-2024-34482 · Itsourcecode · Itsourcecode Construction Management System

Name of the Vulnerable Software and Affected Versions: Itsourcecode Construction Management System version 1.0 Description: A SQL injection issue in printtool.php allows remote attackers to execute arbitrary SQL commands via the borrow id parameter. This enables attackers to manipulate database...