CVE-2026-5675

The CVE-2026-5675 entry concerns itsourcecode Construction Management System 1.0. The vulnerability affects an unknown portion of the Parameter Handler, specifically the /borrowed_tool.php script, where the emp argument can be manipulated to perform an SQL injection. This can be exploited remotel...

CVE-2026-5675 itsourcecode Construction Management System Parameter borrowed_tool.php sql injection

A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /borrowedtool.php of the component Parameter Handler. The manipulation of the argument emp results in sql injection. It is possible to launch the attack remotely. The exploit has...