PT-2026-35284 · Itsourcecode · Construction Management System

Willchen · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7073

Mitre

CVSS v3.1

7.3

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /execute.php. This manipulation of the argument code causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-7073

Affected Products

Construction Management System

References · 6

• 🔥 https://github.com/Beatriz-ai-boop/cve/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7073 · Security Note
• https://vuldb.com/vuln/359648 · Note
• https://vuldb.com/vuln/359648/cti · Note
• https://itsourcecode.com · Note
• https://vuldb.com/submit/799543 · Note