PT-2026-31868 · Itsourcecode · Construction Management System

Ifan · Published 2026-04-10 · Updated 2026-04-10 · CVE-2026-6007

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /del.php. The manipulation of the argument equipname results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-6007

Affected Products

Construction Management System

References · 6

• 🔥 https://github.com/ltranquility/submit/issues/8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-6007 · Security Note
• https://vuldb.com/vuln/356563/cti · Note
• https://vuldb.com/vuln/356563 · Note
• https://itsourcecode.com · Note
• https://vuldb.com/submit/794604 · Note