PT-2026-27636 · Code Projects · Simple Laundry System

Tnn2026 · Published 2026-03-25 · Updated 2026-03-25 · CVE-2026-4784

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was found in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /checkcheckout.php of the component Parameter Handler. The manipulation of the argument serviceId results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4784

Affected Products

Simple Laundry System

References · 8

• 🔥 https://github.com/zzb1388/cve2/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4784 · Security Note
• https://vuldb.com/?ctiid.352801 · Note
• https://vuldb.com/?id.352801 · Note
• https://code-projects.org · Note
• https://twitter.com/VulmonFeeds/status/2036674874257633790 · Twitter Post
• https://vuldb.com/?submit.775811 · Note
• https://twitter.com/cyberbivash/status/2036658047896912364 · Twitter Post