SQL Injection Vulnerability in Itsourcecode Construction Management System
CVE-2024-50971
7.2HIGH
What is CVE-2024-50971?
A SQL injection vulnerability has been identified in the print.php file of the Itsourcecode Construction Management System version 1.0. This flaw allows remote attackers to execute arbitrary SQL commands by manipulating the map_id parameter. Successful exploitation of this vulnerability could lead to unauthorized access to sensitive database information, posing significant security risks for affected installations. Users and administrators are advised to apply necessary security measures to safeguard their systems from potential exploitation.