A SQL injection vulnerability has been discovered in code-projects Real State Services version 1.0. The vulnerability affects the /loginuser.php file in the Login component, specifically through manipulation of the Username argument. The attack can be executed remotely and the exploit has been publicly disclosed, making it available for potential misuse. This represents a significant security risk as SQL injection attacks can lead to unauthorized database access and data compromise.