Skip to content

Itsourcecode · product

Construction Management System

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. itsourcecode Construction Management System del1.php sql injectionCVE-2026-6030itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  2. itsourcecode Construction Management System locations.php sql injectionCVE-2026-7075itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  3. itsourcecode Construction Management System execute1.php sql injectionCVE-2026-7074itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  4. itsourcecode Construction Management System execute.php sql injectionCVE-2026-7073itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  5. itsourcecode Construction Management System borrowedtool.php sql injectionCVE-2026-5719itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  6. itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injectionCVE-2026-5620itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  7. itsourcecode Construction Management System equipments.php sql injectionCVE-2026-6191itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  8. itsourcecode Construction Management System employees.php sql injectionCVE-2026-6190itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  9. itsourcecode Construction Management System del.php sql injectionCVE-2026-6007itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  10. itsourcecode Construction Management System borrowed_tool_report.php sql injectionCVE-2026-5823itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  11. itsourcecode Construction Management System Parameter borrowed_tool.php sql injectionCVE-2026-5675itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  12. itsourcecode Construction Management System Parameter borrowed_equip.php sql injectionCVE-2026-5660itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.