Skip to content
Threat Feed
Subscribe

Tag

Public-Exploit

1 brief RSS
high threat

CVE-2026-14746: SQL Injection in code-projects Real State Services

A high-severity SQL injection vulnerability (CVE-2026-14746) exists in code-projects Real State Services 1.0, specifically in the `/addprojectrent.php` file, where the `amen` argument can be manipulated to execute arbitrary SQL commands, enabling remote attackers to achieve unauthorized data access or modification, with public exploit disclosure increasing the risk of active exploitation.

exploited Real State Services 1.0 sql-injection web-vulnerability cve webserver public-exploit
1r 1t 1c