SQL Injection Vulnerability in Itsourcecode Construction Management System
CVE-2024-50972
7.2HIGH
What is CVE-2024-50972?
A significant SQL injection vulnerability exists within the printtool.php file of the Itsourcecode Construction Management System version 1.0. This vulnerability permits remote attackers to exploit the system by executing arbitrary SQL commands through the manipulation of the borrow_id parameter. As a result, unauthorized access to sensitive database information poses a serious security threat, necessitating prompt remediation actions by users of the affected system.