EIP-2026-111704

This is a working proof-of-concept for SQL injection vulnerabilities in Real Estate Custom Script 2.0. The exploit demonstrates three distinct SQL injection points via HTTP GET requests, targeting the `property_id`, `filter_area`, and `filter_range` parameters.