Product by ItsourceCode
Construction Management System
12 known vulnerabilities in Construction Management System (ItsourceCode), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2026-7074 | itsourcecode Construction Management System execute1.php sql injection | 7.3 | |
| High | CVE-2026-7075 | itsourcecode Construction Management System locations.php sql injection | 7.3 | |
| High | CVE-2026-7073 | itsourcecode Construction Management System execute.php sql injection | 7.3 | |
| Medium | CVE-2026-5620 | itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injection | 6.3 | |
| Medium | CVE-2026-6190 | itsourcecode Construction Management System employees.php sql injection | 6.3 | |
| Medium | CVE-2026-6191 | itsourcecode Construction Management System equipments.php sql injection | 6.3 | |
| Medium | CVE-2026-6030 | itsourcecode Construction Management System del1.php sql injection | 6.3 | |
| Medium | CVE-2026-6007 | itsourcecode Construction Management System del.php sql injection | 6.3 | |
| Medium | CVE-2026-5823 | itsourcecode Construction Management System borrowed_tool_report.php sql injection | 6.3 | |
| Medium | CVE-2026-5719 | itsourcecode Construction Management System borrowedtool.php sql injection | 6.3 | |
| Medium | CVE-2026-5675 | itsourcecode Construction Management System Parameter borrowed_tool.php sql injection | 6.3 | |
| Medium | CVE-2026-5660 | itsourcecode Construction Management System Parameter borrowed_equip.php sql injection | 6.3 |