Skip to content
OpenAdvisories

Product · itsourcecode

Construction Management System

12 known vulnerabilities.

9 results · Clear filters · Feed

  • Medium 6.3

    itsourcecode Construction Management System equipments.php sql injection

    A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /equipments.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The …

  • Medium 6.3

    itsourcecode Construction Management System employees.php sql injection

    A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /employees.php. Performing a manipulation of the argument Name results in sql injection. The attack can be initiated remotely…

  • Medium 6.3

    itsourcecode Construction Management System del1.php sql injection

    A flaw has been found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /del1.php. This manipulation of the argument toolname causes sql injection. Remote exploitation of the attack is possible. The ex…

  • Medium 6.3

    itsourcecode Construction Management System del.php sql injection

    A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /del.php. The manipulation of the argument equipname results in sql injection. The attack can be launched remotely. The exploit has been…

  • Medium 6.3

    itsourcecode Construction Management System borrowed_tool_report.php sql injection

    A weakness has been identified in itsourcecode Construction Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowed_tool_report.php. This manipulation of the argument Home causes sql injection. It is possible to initi…

  • Medium 6.3

    itsourcecode Construction Management System borrowedtool.php sql injection

    A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /borrowedtool.php. Executing a manipulation of the argument code can lead to sql injection. It is possible to launch the attack remotely. Th…

  • Medium 6.3

    itsourcecode Construction Management System Parameter borrowed_tool.php sql injection

    A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /borrowed_tool.php of the component Parameter Handler. The manipulation of the argument emp results in sql injection. It is possible to laun…

  • Medium 6.3

    itsourcecode Construction Management System Parameter borrowed_equip.php sql injection

    A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /borrowed_equip.php of the component Parameter Handler. This manipulation of the argument emp causes sql injection. The …

  • Medium 6.3

    itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injection

    A vulnerability has been found in itsourcecode Construction Management System 1.0. Affected is an unknown function of the file /borrowed_equip_report.php of the component Parameter Handler. The manipulation of the argument Home leads to sql injection. It is p…