CVE-2026-14743mediumCWE-74CWE-89

CVE-2026-14743: medium-severity vulnerability in code-projects Real State Services

code-projects Real State Services normalHomeSale.php sql injection

Published · Updated

Follow this CVE+ Monitor Real State Services

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.9epss 0.4%
A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argument loc leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Real State Services
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — code-projects Real State Services

In the same product, most dangerous first.

CVE-2026-14769MEDIUMcode-projects Real State Services pay.php sql injectionEPSS 0.4%CVE-2026-14768MEDIUMcode-projects Real State Services builderHome.php sql injectionEPSS 0.4%CVE-2026-14746MEDIUMcode-projects Real State Services addprojectrent.php sql injectionEPSS 0.4%CVE-2026-14745MEDIUMcode-projects Real State Services single-list_rent.php sql injectionEPSS 0.4%CVE-2026-14744MEDIUMcode-projects Real State Services normalHomeRent.php sql injectionEPSS 0.4%CVE-2026-13559MEDIUMcode-projects Real State Services single-list_sale.php add sql injectionEPSS 0.4%