Search: execute1.php

CVE-2026-7074 is a medium severity SQL injection vulnerability in itsourcecode Construction Management System version 1.0. The issue exists in the /execute1.php file where manipulation of the 'code' argument can lead to SQL injection. The vulnerability can be exploited remotely without authentication. The exploit has been publicly disclosed, but there are no known exploits in the wild at this time. No official patch or remediation guidance has been provided by the vendor yet.