PT-2026-27073 · Unknown · Simple Laundry System

Ysi6701 · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4580

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simple Laundry System version 1.0

Description A security flaw exists in Simple Laundry System version 1.0 related to SQL injection. The issue is located in the /checkupdatestatus.php file within the Parameters Handler component. Manipulation of the serviceId parameter can lead to SQL injection. The exploit has been publicly released and may be used for attacks. The vulnerable function is unknown.

Recommendations Simple Laundry System version 1.0: Address the SQL injection issue by sanitizing or validating the serviceId parameter before using it in database queries. As a temporary workaround, consider restricting access to the /checkupdatestatus.php file until a fix is available.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4580

Affected Products

Simple Laundry System

References · 11

• 🔥 https://github.com/anon387tdug/anon388/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4580 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/?ctiid.352417 · Note
• https://twitter.com/CVEnew/status/2036024181083852887 · Twitter Post
• https://twitter.com/cyberbivash/status/2036041071885484468 · Twitter Post
• https://vuldb.com/?submit.775210 · Note
• https://twitter.com/RedPacketSec/status/2036109161088405784 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2036027224701161962 · Twitter Post
• https://twitter.com/CVEarity/status/2036118721627054307 · Twitter Post
• https://vuldb.com/?id.352417 · Note