CVE-2026-6030: itsourcecode Construction Management System del1.php sql injection
A flaw has been found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /del1.php. This manipulation of the argument toolname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6030?
CVE-2026-6030 has been classified as a high severity vulnerability due to its potential for SQL injection exploitation.
How do I fix CVE-2026-6030?
To fix CVE-2026-6030, it is recommended to update the itsourcecode Construction Management System to a patched version that addresses the SQL injection vulnerability.
What software is affected by CVE-2026-6030?
CVE-2026-6030 affects version 1.0 of the itsourcecode Construction Management System.
What kind of exploit is demonstrated by CVE-2026-6030?
CVE-2026-6030 demonstrates an SQL injection exploit that can occur via the toolname argument in the del1.php file.
Can CVE-2026-6030 be exploited remotely?
Yes, CVE-2026-6030 can be exploited remotely, allowing attackers to execute arbitrary SQL queries.