CVE-2026-14745 - code-projects Real State Services single-list_rent.php sql injection

Back Back to CVE browser

MEDIUM

code-projects Real State Services single-list_rent.php sql injection

Published Jul 5, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.43%

Description

A weakness has been identified in code-projects Real State Services 1.0. This impacts an unknown function of the file /single-list_rent.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

Vendor Code-Projects Product Real State Services Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Code-Projects

Real State Services

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (7)

https://code-projects.org/
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41750
Advisory
https://github.com/6Justdododo6/CVE/issues/24
exploitissue-tracking
https://vuldb.com/cve/CVE-2026-14745
third-party-advisory
https://vuldb.com/submit/849265
third-party-advisory
https://vuldb.com/vuln/376331
vdb-entrytechnical-description
https://vuldb.com/vuln/376331/cti
signaturepermissions-required

Link	Providers	Tags
https://code-projects.org/		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41750		Advisory
https://github.com/6Justdododo6/CVE/issues/24		exploitissue-tracking
https://vuldb.com/cve/CVE-2026-14745		third-party-advisory
https://vuldb.com/submit/849265		third-party-advisory
https://vuldb.com/vuln/376331		vdb-entrytechnical-description
https://vuldb.com/vuln/376331/cti		signaturepermissions-required