PT-2026-27073 · Unknown · Simple Laundry System

Ysi6701 · Publicado 2026-03-23 · Atualizado 2026-03-23 · CVE-2026-4580

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simple Laundry System version 1.0

Description A security flaw exists in Simple Laundry System version 1.0 related to SQL injection. The issue is located in the /checkupdatestatus.php file within the Parameters Handler component. Manipulation of the serviceId parameter can lead to SQL injection. The exploit has been publicly released and may be used for attacks. The vulnerable function is unknown.

Recommendations Simple Laundry System version 1.0: Address the SQL injection issue by sanitizing or validating the serviceId parameter before using it in database queries. As a temporary workaround, consider restricting access to the /checkupdatestatus.php file until a fix is available.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-4580

Produtos afetados

Simple Laundry System

Referências · 11

• 🔥 https://github.com/anon387tdug/anon388/issues/2 · Exploit
• https://code-projects.org · Nota
• https://vuldb.com/?ctiid.352417 · Nota
• https://twitter.com/CVEnew/status/2036024181083852887 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-4580 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2036041071885484468 · Publicação no Twitter
• https://vuldb.com/?submit.775210 · Nota
• https://twitter.com/RedPacketSec/status/2036109161088405784 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2036027224701161962 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2036118721627054307 · Publicação no Twitter
• https://vuldb.com/?id.352417 · Nota