Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:construction_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductConstruction Management System (144d27cb-0e8f-53a1-a25c-f52ef713ac9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7075 vulnerable 2026-06-08 08:07:05.361015 itsourcecode Construction Management System locations.php sql injection
HIGH (7.3)
A vulnerability was found in itsourcecode Construction Management System 1.0. This issue affects some unknown processing of the file /locations.php. Performing a manipulation of the argument address results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Published: 2026-04-27T01:30:31.927Z
Updated: 2026-04-27T13:23:32.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7074 vulnerable 2026-06-08 08:07:05.360638 itsourcecode Construction Management System execute1.php sql injection
HIGH (7.3)
A vulnerability has been found in itsourcecode Construction Management System 1.0. This vulnerability affects unknown code of the file /execute1.php. Such manipulation of the argument code leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Published: 2026-04-27T01:15:14.370Z
Updated: 2026-04-27T13:30:21.705Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7073 vulnerable 2026-06-08 08:07:05.360134 itsourcecode Construction Management System execute.php sql injection
HIGH (7.3)
A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /execute.php. This manipulation of the argument code causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Published: 2026-04-27T01:00:20.732Z
Updated: 2026-04-27T13:02:07.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6191 vulnerable 2026-06-08 08:07:04.534146 itsourcecode Construction Management System equipments.php sql injection
MEDIUM (6.3)
A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /equipments.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-13T16:30:24.440Z
Updated: 2026-04-14T19:37:43.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6190 vulnerable 2026-06-08 08:07:04.533870 itsourcecode Construction Management System employees.php sql injection
MEDIUM (6.3)
A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /employees.php. Performing a manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Published: 2026-04-13T16:15:13.484Z
Updated: 2026-04-13T16:53:41.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6030 vulnerable 2026-06-08 08:07:04.399062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6007 vulnerable 2026-06-08 08:07:04.361807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5823 vulnerable 2026-06-08 08:07:04.136293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5719 vulnerable 2026-06-08 08:07:04.019531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5675 vulnerable 2026-06-08 08:07:03.969550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5660 vulnerable 2026-06-08 08:07:03.958955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5620 vulnerable 2026-06-08 08:07:03.918809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.