Lucene search
K

2155 matches found

CVE
CVE
added 2026/04/10 6:45 a.m.14 views

CVE-2026-6030

The CVE-2026-6030 entry concerns itsourcecode Construction Management System 1.0. The vulnerable component is an unknown function in /del1.php where manipulating the toolname argument leads to SQL injection. Remote exploitation is possible, and an exploit has been published. No remediation detail...

6.5CVSS6.4AI score0.00266EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/10 3:15 a.m.30 views

CVE-2026-6007 itsourcecode Construction Management System del.php sql injection

A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /del.php. The manipulation of the argument equipname results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS0.00196EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/10 12:0 a.m.23 views

CVE-2026-36235

A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'subjcode' parameter is directly embedded into the SQL query via string interpolation without any sanitization or validation...

0.00319EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.3 views

PT-2026-31923

itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter...

5.9AI score0.00319EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/04/10 12:0 a.m.2 views

CVE-2026-36234

itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter...

5.9AI score0.00319EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/10 12:0 a.m.1 views

CVE-2026-36232

A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $GET'classId' is directly concatenated into the SQL query without any sanitization or validation...

5.8AI score0.00319EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.4 views

itsourcecode Construction Management System SQL注入漏洞

itsourcecode Construction Management System is an open-source construction management system developed by itsourcecode. Version 1.0 of the itsourcecode Construction Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter equipname in...

6.5CVSS6.7AI score0.00196EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.3 views

itsourcecode Construction Management System SQL注入漏洞

itsourcecode Construction Management System is an open-source construction management system developed by itsourcecode. Version 1.0 of the itsourcecode Construction Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “toolname” i...

6.5CVSS6.7AI score0.00266EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.3 views

itsourcecode Online Student Enrollment System 安全漏洞

itsourcecode Online Student Enrollment System is an open-source online enrollment system developed by itsourcecode. Version 1.0 of the itsourcecode Online Student Enrollment System contains a security vulnerability. This vulnerability arises from the subjcode parameter in the...

9.8CVSS5.8AI score0.00319EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.3 views

itsourcecode Online Student Enrollment System 安全漏洞

itsourcecode Online Student Enrollment System is an open-source online enrollment system developed by itsourcecode. Version 1.0 of the itsourcecode Online Student Enrollment System contains a security vulnerability. This vulnerability stems from the subjcode parameter in the scheduleSubList.php...

9.8CVSS5.8AI score0.00319EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.3 views

itsourcecode Online Student Enrollment System 安全漏洞

itsourcecode Online Student Enrollment System is an open-source online enrollment system developed by itsourcecode. Version 1.0 of the itsourcecode Online Student Enrollment System contains a security vulnerability. This vulnerability stems from the uncleaned or unvalidated coursename parameter i...

9.8CVSS5.9AI score0.00319EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.4 views

itsourcecode Construction Management System SQL注入漏洞

itsourcecode Construction Management System is an open-source construction management system developed by itsourcecode. Version 1.0 of the itsourcecode Construction Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Home” in th...

6.5CVSS6.6AI score0.00192EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/08 11:30 p.m.27 views

CVE-2026-5823 itsourcecode Construction Management System borrowed_tool_report.php sql injection

A weakness has been identified in itsourcecode Construction Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowedtoolreport.php. This manipulation of the argument Home causes sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS0.00192EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/08 11:30 p.m.2 views

CVE-2026-5823

A weakness has been identified in itsourcecode Construction Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowedtoolreport.php. This manipulation of the argument Home causes sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS6.5AI score0.00192EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/08 11:30 p.m.3 views

CVE-2026-5823 itsourcecode Construction Management System borrowed_tool_report.php sql injection

A weakness has been identified in itsourcecode Construction Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowedtoolreport.php. This manipulation of the argument Home causes sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS6.5AI score0.00192EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/07 3:30 a.m.2 views

EUVD-2026-19561

A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /borrowedtool.php. Executing a manipulation of the argument code can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may b...

6.5CVSS6.6AI score0.00246EPSS
Exploits0References6
NVD
NVD
added 2026/04/07 3:16 a.m.4 views

CVE-2026-5719

A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /borrowedtool.php. Executing a manipulation of the argument code can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may b...

6.5CVSS0.00246EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/07 2:0 a.m.4 views

CVE-2026-5719

A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /borrowedtool.php. Executing a manipulation of the argument code can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may b...

6.5CVSS6.6AI score0.00246EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/07 2:0 a.m.1 views

CVE-2026-5719 itsourcecode Construction Management System borrowedtool.php sql injection

A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /borrowedtool.php. Executing a manipulation of the argument code can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may b...

6.5CVSS6.6AI score0.00246EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.3 views

itsourcecode Construction Management System SQL注入漏洞

itsourcecode Construction Management System is an open-source construction management system developed by itsourcecode. Version 1.0 of the itsourcecode Construction Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “code” in th...

6.5CVSS6.7AI score0.00246EPSS
Exploits0References5
Rows per page
Query Builder