A security vulnerability has been detected in code-projects Real State Services 1.0. Affected is an unknown function of the file /addprojectrent.php. The manipu…

A SQL injection vulnerability has been identified in code-projects Real State Services 1.0, specifically in the file /addprojectrent.php. The vulnerability is triggered by manipulating the 'amen' argument, allowing an attacker to perform SQL injection attacks. The attack can be initiated remotely without requiring physical access to the system. A public exploit has already been disclosed, increasing the risk of active exploitation. The affected function within the file is currently unspecified. This vulnerability poses a significant risk to any deployment of the affected software version. Users of code-projects Real State Services 1.0 are advised to apply patches or mitigations as soon as they become available.