PT-2026-35337 · Itsourcecode · Construction Management System

Willchen · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7075

Mitre

CVSS v3.1

7.3

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in itsourcecode Construction Management System 1.0. This issue affects some unknown processing of the file /locations.php. Performing a manipulation of the argument address results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-7075

Affected Products

Construction Management System

References · 6

• 🔥 https://github.com/Beatriz-ai-boop/cve/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7075 · Security Note
• https://itsourcecode.com · Note
• https://vuldb.com/vuln/359650/cti · Note
• https://vuldb.com/submit/799545 · Note
• https://vuldb.com/vuln/359650 · Note