The vulnerability in itsourcecode Real Estate Management System 1.0 involves SQL injection via manipulation of certain parameters (search, delivery_type, search_price, property_type) in the search.php file. This allows an attacker to inject SQL commands remotely, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.3 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating network attack vector, low attack complexity, no privileges or user interaction required, and partial impact on confidentiality, integrity, and availability. No patch or vendor advisory is provided.

Successful exploitation could allow an attacker to execute arbitrary SQL commands remotely, leading to partial loss of confidentiality, integrity, and availability of the affected system's data. The vulnerability affects the search functionality parameters, potentially exposing or modifying sensitive data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected application and monitor for suspicious activity related to the vulnerable parameters. Avoid exposing the vulnerable functionality to untrusted networks if possible.