CVE-2026-5823

MediumCVSS 6.3/10Last modified Jul 24, 2026

Description

A weakness has been identified in itsourcecode Construction Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowed_tool_report.php. This manipulation of the argument Home causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
itsourcecode	Construction Management System	1.0

References

Timeline

Published: Apr 9, 2026
Last modified: Jul 24, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-582307.0SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a s CVE-2026-5823110.0SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain CVE-2026-582337.6SAP Change and Transport System Attach Tool (ctsattach) allows an authenticated attacker to supply a specially crafted archive file which, w CVE-2026-582342.2SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitio CVE-2026-582356.3SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that cont CVE-2026-582365.5SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an int CVE-2026-582375.9WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could CVE-2026-582385.9SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially craf CVE-2026-582393.7SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted re CVE-2026-58247.3A security vulnerability has been detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /userchecklo CVE-2026-582409.8SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. CVE-2026-582414.2SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modify