7.3High
CVE-2026-4784code-projects Simple Laundry System Parameter checkcheckout.php sql injection
Description
A vulnerability was found in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /checkcheckout.php of the component Parameter Handler. The manipulation of the argument serviceId results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| code-projects | Simple Laundry System | 1.0 |
References and patches
- VDB-352801 | code-projects Simple Laundry System Parameter checkcheckout.php sql injection vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- VDB-352801 | CTI Indicators (IOB, IOC, TTP, IOA) signatureVDB Entry
- Submit #775811 | code-projects Simple Laundry System V1.0 SQL injection third-party-advisoryThird Party AdvisoryVDB Entry
- https://github.com/zzb1388/cve2/issues/1 exploitissue-trackingExploitIssue Tracking
- https://code-projects.org/ productProduct
CPE matches (NVD) (1)
cpe:2.3:a:code-projects:simple_laundry_system:1.0:*:*:*:*:*:*:*