CVE-2026-14769 - code-projects Real State Services pay.php sql injection

Back Back to CVE browser

MEDIUM

code-projects Real State Services pay.php sql injection

Published Jul 5, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.43%

Description

A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argument Bankname leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Affected products

Vendor Code-Projects Product Real State Services Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Code-Projects

Real State Services

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (7)

https://code-projects.org/
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41779
Advisory
https://github.com/6Justdododo6/CVE/issues/28
exploitissue-tracking
https://vuldb.com/cve/CVE-2026-14769
third-party-advisory
https://vuldb.com/submit/849374
third-party-advisory
https://vuldb.com/vuln/376359
vdb-entrytechnical-description
https://vuldb.com/vuln/376359/cti
signaturepermissions-required

Link	Providers	Tags
https://code-projects.org/		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41779		Advisory
https://github.com/6Justdododo6/CVE/issues/28		exploitissue-tracking
https://vuldb.com/cve/CVE-2026-14769		third-party-advisory
https://vuldb.com/submit/849374		third-party-advisory
https://vuldb.com/vuln/376359		vdb-entrytechnical-description
https://vuldb.com/vuln/376359/cti		signaturepermissions-required