PT-2026-28650 · Code Projects · Simple Laundry System

Kbloow · Publicado 2026-03-26 · Atualizado 2026-03-26 · CVE-2026-4849

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Simple Laundry System version 1.0

Description A cross site scripting issue exists in the Parameter Handler component of code-projects Simple Laundry System. The issue is related to the manipulation of the firstName argument within the /modify.php file. The attack can be initiated remotely and the exploit is publicly available.

Recommendations Apply any available updates to address the issue in the Parameter Handler component of the affected system. As a temporary workaround, consider restricting access to the /modify.php file. Avoid using the firstName parameter in the affected file until the issue is resolved.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-4849

Produtos afetados

Simple Laundry System

Referências · 8

• 🔥 https://github.com/kbloow/CVE/issues/2 · Exploit
• https://twitter.com/CVEnew/status/2037137721626403203 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2037106144217350377 · Publicação no Twitter
• https://vuldb.com/?submit.776183 · Nota
• https://vuldb.com/?id.353154 · Nota
• https://vuldb.com/?ctiid.353154 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4849 · Nota de Segurança
• https://code-projects.org · Nota