CVE-2026-14746code-projects Real State Services addprojectrent.php sql injection

Beschreibung

A security vulnerability has been detected in code-projects Real State Services 1.0. Affected is an unknown function of the file /addprojectrent.php. The manipulation of the argument amen leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-376332 | code-projects Real State Services addprojectrent.php sql injection vdb-entrytechnical-description
• VDB-376332 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
• CVE-2026-14746 | CVE Analysis and Report third-party-advisory
• Submit #849284 | code-projects Real State Services V1.0 SQL Injection third-party-advisory
• https://github.com/6Justdododo6/CVE/issues/25 exploitissue-tracking
• https://code-projects.org/ product