Sql injection

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...