PHP Real Estate Property Script suffers from a remote SQL injection vulnerability.