CVE-2026-6191

Description

A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /equipments.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVSS Vector

References

• https://github.com/ltranquility/cve_submit/issues/16
• https://itsourcecode.com/
• https://vuldb.com/submit/797384
• https://vuldb.com/vuln/357113
• https://vuldb.com/vuln/357113/cti