This vulnerability affects code-projects Simple Laundry System 1.0 and involves an SQL injection in the /modifymember.php file's Parameter Handler component. Specifically, the firstName parameter is not properly sanitized, allowing an attacker to inject malicious SQL code remotely without requiring privileges or user interaction. The CVSS 4.0 base score is 6.9, indicating a medium severity risk. No official fix or patch has been documented, and no known exploits in the wild have been confirmed.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The vulnerability is remotely exploitable without authentication, increasing the risk of attack. However, the impact is rated medium due to limited complexity and partial impact metrics in the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement input validation and sanitization on the firstName parameter in /modifymember.php to prevent SQL injection. Monitoring for unusual database queries and restricting database permissions may also help mitigate potential impact.