PT-2026-30787 · Itsourcecode · Construction Management System

Linyou · Publicado 2026-04-07 · Atualizado 2026-04-07 · CVE-2026-5719

Mitre

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /borrowedtool.php. Executing a manipulation of the argument code can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-5719

Produtos afetados

Construction Management System

Referências · 6

• 🔥 https://github.com/ltranquility/submit/issues/7 · Exploit
• https://vuldb.com/vuln/355661/cti · Nota
• https://vuldb.com/submit/792968 · Nota
• https://vuldb.com/vuln/355661 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-5719 · Nota de Segurança
• https://itsourcecode.com · Nota