Threat Intelligence Database

A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /checkupdatestatus.php. The manipulation of the argument serviceId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /checkcheckout.php. Performing a manipulation of the argument serviceId results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

CVE-2026-5824 is a medium severity SQL injection vulnerability in code-projects Simple Laundry System version 1.0. It affects the /userchecklogin.php file, where manipulation of the userid argument allows remote attackers to perform SQL injection. The vulnerability has been publicly disclosed, but no official patch or remediation guidance is currently available from the vendor.

CVE-2026-5648 is a medium-severity SQL injection vulnerability in code-projects Simple Laundry System version 1.0. The flaw exists in the /userfinishregister.php file within the Parameter Handler component, where manipulation of the firstName argument can lead to SQL injection. This vulnerability can be exploited remotely without authentication or user interaction. Although an exploit has been published, there are no known exploits observed in the wild. No official patch or remediation guidance is currently available.

A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component Parameter Handler. This manipulation of the argument searchServiceId causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

A vulnerability has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modifymember.php of the component Parameter Handler. Such manipulation of the argument firstName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-5257 is a medium severity SQL injection vulnerability in code-projects Simple Laundry System version 1.0. It arises from improper handling of the userid parameter in the /delstaffinfo.php component, allowing remote attackers to manipulate SQL queries. The vulnerability has been publicly disclosed, but no known exploits are currently reported in the wild. There is no information about an available patch or official remediation.

CVE-2026-4908 is a medium severity SQL injection vulnerability in code-projects Simple Laundry System version 1.0. The flaw exists in the /modstaffinfo.php file within the Parameter Handler component, where manipulation of the userid argument allows an attacker to perform SQL injection remotely. The vulnerability has a CVSS 4.0 base score of 6.9. Although an exploit has been publicly released, there are no known exploits in the wild at this time. No official patch or remediation guidance is currently provided by the vendor.

A security flaw has been discovered in code-projects Simple Laundry System 1.0. Affected is an unknown function of the file /checkregisitem.php of the component Parameter Handler. The manipulation of the argument Long-arm-shirtVol results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

MediumVulnerabilityUnited StatesIndiaBrazil+7#cve#cve-2026-4850

A weakness has been identified in code-projects Simple Laundry System 1.0. Affected is an unknown function of the file /checklogin.php of the component Parameters Handler. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.