CVE-2026-6030

The CVE-2026-6030 entry concerns itsourcecode Construction Management System 1.0. The vulnerable component is an unknown function in /del1.php where manipulating the toolname argument leads to SQL injection. Remote exploitation is possible, and an exploit has been published. No remediation detail...

itsourcecode Construction Management System SQL注入漏洞

itsourcecode Construction Management System is an open-source construction management system developed by itsourcecode. Version 1.0 of the itsourcecode Construction Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “toolname” i...