A vulnerability labeled as critical has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /del.php. The manipulation of the argument equipname results in sql injection.
This vulnerability is reported as CVE-2026-6007. The attack can be launched remotely. Moreover, an exploit is present.
