CVE-2026-6190: itsourcecode Construction Management System employees.php sql injection
A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /employees.php. Performing a manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6190?
CVE-2026-6190 has a high severity due to its ability to allow SQL injection attacks that can compromise database integrity.
How do I fix CVE-2026-6190?
To fix CVE-2026-6190, sanitize and validate all user inputs in the employees.php file to prevent SQL injection.
What are the consequences of exploiting CVE-2026-6190?
Exploiting CVE-2026-6190 can lead to unauthorized access to sensitive data and potentially full control over the database.
Which versions of the Construction Management System are affected by CVE-2026-6190?
CVE-2026-6190 specifically affects version 1.0 of the itsourcecode Construction Management System.
Is there a patch available for CVE-2026-6190?
Currently, there is no specific patch for CVE-2026-6190, so implementing input validation is recommended.