CVE-2026-5823: itsourcecode Construction Management System borrowed_tool_report.php sql injection
A weakness has been identified in itsourcecode Construction Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowedtoolreport.php. This manipulation of the argument Home causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5823?
CVE-2026-5823 has been classified as a SQL injection vulnerability, which is considered critical due to its potential for data compromise.
How do I fix CVE-2026-5823?
To fix CVE-2026-5823, validate and sanitize all user inputs in the borrowed_tool_report.php file to prevent SQL injection attacks.
Which software is affected by CVE-2026-5823?
CVE-2026-5823 affects the itsourcecode Construction Management System version 1.0.
What is the exploit impact of CVE-2026-5823?
The exploit impact of CVE-2026-5823 could allow an attacker to execute arbitrary SQL queries on the database, potentially leading to data leakage.
In which file is CVE-2026-5823 found?
CVE-2026-5823 is found in the borrowed_tool_report.php file of the itsourcecode Construction Management System.