A critical SQL injection vulnerability in code-projects Real State Services 1.0 is currently susceptible to public exploit code, increasing the risk of immediate compromise.

This is a SQL injection vulnerability located in the /single-list_rent.php file, which fails to properly sanitize the 'ID' parameter. An unauthenticated attacker can leverage this flaw to execute arbitrary database queries, leading to full database compromise.

With a CVSS score of 7.3 and the confirmed availability of public exploit code, this vulnerability represents an urgent threat. Successful exploitation can result in the complete breach of sensitive information, unauthorized modification or deletion of real estate listings, and unauthorized access to administrative functions.

Immediate Action: Given the availability of public exploits, immediately restrict access to the /single-list_rent.php file and implement robust server-side input validation for the 'ID' parameter.

Proactive Monitoring: Monitor database query logs for suspicious activity, particularly queries that deviate from expected patterns or attempt to bypass authentication via the 'ID' parameter.

Compensating Controls: Utilize a Web Application Firewall (WAF) to inspect incoming traffic for SQL injection signatures specifically targeting the 'ID' parameter in the affected URI.

Public Exploit Available: true

The combination of unauthenticated access and available public exploit code makes this a high-priority vulnerability. System administrators must treat this as an active threat and apply protective measures immediately to prevent unauthorized database access.