A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/delivery_type/search_price/property_type results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.

A SQL injection vulnerability was identified in itsourcecode Real Estate Management System version 1.0. The flaw exists in the file search.php, where manipulation of arguments including search, delivery_type, search_price, and property_type can trigger SQL injection. The vulnerability can be exploited remotely without requiring physical access to the system. A public exploit is already available, increasing the risk of active exploitation. The issue affects an unknown portion of the application's functionality. Attackers could potentially extract, modify, or delete database contents through this vector. The vulnerability has been catalogued in NVD, VulDB, and referenced in a GitHub issue. Organizations using this system should apply patches or mitigations immediately given the public exploit availability.