CVE-2017-17628: Improper Neutralization of Special Elements used in an SQL Command

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...