CVE-2026-14743: SQL Injection in code-projects Real State Services
CVE-2026-14743 is a SQL injection vulnerability in code-projects Real State Services version 1.0. The issue exists in an unknown function within the /normalHomeSale.php file, where manipulation of the 'loc' argument can lead to SQL injection. The vulnerability can be exploited remotely without authentication. The CVSS 4.0 base score is 6.9, indicating a medium severity level.
AI Analysis
Technical Summary
This vulnerability affects code-projects Real State Services version 1.0. It involves SQL injection via the 'loc' parameter in an unknown function of the /normalHomeSale.php file. An attacker can remotely exploit this flaw without any privileges or user interaction. The vulnerability allows partial compromise of confidentiality, integrity, and availability, as indicated by the CVSS vector. No official patch or remediation guidance is currently available.
Potential Impact
Successful exploitation of this SQL injection vulnerability can allow an attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, modification, or partial disruption of service. The impact is rated medium severity with limited confidentiality, integrity, and availability impact as per the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to implement input validation and parameterized queries to mitigate SQL injection risks in the affected component.
CVE-2026-14743: SQL Injection in code-projects Real State Services
Description
CVE-2026-14743 is a SQL injection vulnerability in code-projects Real State Services version 1.0. The issue exists in an unknown function within the /normalHomeSale.php file, where manipulation of the 'loc' argument can lead to SQL injection. The vulnerability can be exploited remotely without authentication. The CVSS 4.0 base score is 6.9, indicating a medium severity level.
CVSS v4.0
Score 6.9medium
Affected software
cpe:2.3:a:code-projects:real_state_services:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects code-projects Real State Services version 1.0. It involves SQL injection via the 'loc' parameter in an unknown function of the /normalHomeSale.php file. An attacker can remotely exploit this flaw without any privileges or user interaction. The vulnerability allows partial compromise of confidentiality, integrity, and availability, as indicated by the CVSS vector. No official patch or remediation guidance is currently available.
Potential Impact
Successful exploitation of this SQL injection vulnerability can allow an attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, modification, or partial disruption of service. The impact is rated medium severity with limited confidentiality, integrity, and availability impact as per the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to implement input validation and parameterized queries to mitigate SQL injection risks in the affected component.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-07-04T12:56:41.679Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a4a3e5a27e9c79719bf17a1
Added to database: 07/05/2026, 11:22:02 UTC
Last enriched: 07/05/2026, 11:36:21 UTC
Last updated: 07/05/2026, 12:12:18 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.