This vulnerability exists in code-projects Simple Laundry System 1.0 within the /userchecklogin.php file. An attacker can remotely exploit improper input validation of the userid parameter to perform SQL injection, potentially allowing unauthorized database queries. The CVSS 4.0 base score is 6.9, reflecting network attack vector, low complexity, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability. No official fix or patch has been published as of the data provided.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database remotely without authentication. This may lead to unauthorized data access or modification. However, the impact is rated medium due to limited confidentiality, integrity, and availability impact as per the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, users should consider implementing input validation and parameterized queries as temporary mitigations to prevent SQL injection. Monitor vendor channels for updates or patches addressing this vulnerability.