CVE-2024-50972 | THREATINT

Description

A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter.

PUBLISHED Reserved 2024-10-28 | Published 2024-11-13 | Updated 2024-11-18 | Assigner mitre

References

itsourcecode.com/...-system-project-in-php-with-source-code/

github.com/Akhlak2511/CVE-2024-50972

cve.org (CVE-2024-50972)

nvd.nist.gov (CVE-2024-50972)