CVE-2026-14746

Name of the Vulnerable Software and Affected Versions code-projects Real State Services version 1.0

Description A remote SQL injection exists in the /addprojectrent.php file. The issue occurs when the amen variable is manipulated, allowing an attacker to execute arbitrary SQL commands on the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the /addprojectrent.php file to minimize the risk of exploitation.