A vulnerability was found in itsourcecode Construction Management System 1.0. This issue affects some unknown processing of the file /locations.php. Performing …

Published:

26 april 2026 om 22:00:00

Alert date:

27 april 2026 om 03:01:20

Source:

nvd.nist.gov

Web Technologies, Enterprise Applications

A SQL injection vulnerability has been discovered in itsourcecode Construction Management System version 1.0. The vulnerability affects the /locations.php file through manipulation of the address parameter. The flaw allows remote attackers to execute SQL injection attacks. Public exploits are available, making this vulnerability immediately exploitable. The issue has been assigned CVE-2026-7075 and poses a high security risk.

Technical details

Mitigation steps:

Affected products:

itsourcecode Construction Management System 1.0