CVE-2022-28029

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0

Description A SQL injection issue was found in the Simple Real Estate Portal System. The vulnerability can be exploited via the /reps/classes/Master.php API endpoint, specifically when the f parameter is set to delete type.

Recommendations For Simple Real Estate Portal System version 1.0, consider restricting access to the /reps/classes/Master.php API endpoint to minimize the risk of exploitation. Avoid using the f parameter with the delete type value in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.