Code-Projects Real State Services vulnerabilities

CVE-2026-14769 [HIGH] CWE-74 CVE-2026-14769: A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affe A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argument Bankname leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

CVE-2026-14746 [HIGH] CWE-74 CVE-2026-14746: A security vulnerability has been detected in code-projects Real State Services 1.0. Affected is an A security vulnerability has been detected in code-projects Real State Services 1.0. Affected is an unknown function of the file /addprojectrent.php. The manipulation of the argument amen leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

CVE-2026-14768 [HIGH] CWE-74 CVE-2026-14768: A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the file /builderHome.php. This manipulation of the argument loc causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-10262 [HIGH] CWE-74 CVE-2026-10262: A vulnerability has been found in code-projects Real State Services 1.0. This impacts an unknown fun A vulnerability has been found in code-projects Real State Services 1.0. This impacts an unknown function of the file /loginuser.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-14744 [HIGH] CWE-74 CVE-2026-14744: A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknow A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the argument loc results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-14745 [HIGH] CWE-74 CVE-2026-14745: A weakness has been identified in code-projects Real State Services 1.0. This impacts an unknown fun A weakness has been identified in code-projects Real State Services 1.0. This impacts an unknown function of the file /single-list_rent.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-14747 [HIGH] CWE-74 CVE-2026-14747: A vulnerability was detected in code-projects Real State Services 1.0. Affected by this vulnerabilit A vulnerability was detected in code-projects Real State Services 1.0. Affected by this vulnerability is an unknown functionality of the file /addprojectsale.php. The manipulation of the argument amen results in sql injection. The attack can be launched remotely.

CVE-2026-14743 [HIGH] CWE-74 CVE-2026-14743: A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argument loc leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.

CVE-2026-13559 [HIGH] CWE-74 CVE-2026-13559: A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown func A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.