PT-2026-32401 · Itsourcecode · Construction Management System

Cool_Caige · Publicado 2026-04-13 · Atualizado 2026-04-13 · CVE-2026-6190

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /employees.php. Performing a manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-6190

Produtos afetados

Construction Management System

Referências · 6

• 🔥 https://github.com/ltranquility/cve_submit/issues/15 · Exploit
• https://vuldb.com/vuln/357112/cti · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-6190 · Nota de Segurança
• https://itsourcecode.com · Nota
• https://vuldb.com/vuln/357112 · Nota
• https://vuldb.com/submit/797383 · Nota