PT-2026-27073 · Code Projects · Simple Laundry System

Ysi6701 · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4580

Mitre

CVSS v3.1

7.3

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A security flaw has been discovered in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /checkupdatestatus.php of the component Parameters Handler. The manipulation of the argument serviceId results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4580

Affected Products

Simple Laundry System

References · 6

• 🔥 https://github.com/anon387tdug/anon388/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4580 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/?id.352417 · Note
• https://vuldb.com/?submit.775210 · Note
• https://vuldb.com/?ctiid.352417 · Note