CVE-2026-5824

code-projects Simple Laundry System userchecklogin.php sql injection

CVSS 6.9 MEDIUMEPSS 0.3%CWE-74 CWE-89

A security vulnerability has been detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /userchecklogin.php. Such manipulation of the argument userid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

code-projects · Simple Laundry System

public PoCs found — 1

cve_referencegithub.com/lonelyuan/vunls/issues/1unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://code-projects.org/https://github.com/lonelyuan/vunls/issues/1 https://vuldb.com/submit/788302 https://vuldb.com/vuln/356271 https://vuldb.com/vuln/356271/cti