CVE-2026-5824 MEDIUM

CVE-2026-5824: code-projects Simple Laundry System userchecklogin.php sql injection

Vendor Code-Projects
Product Simple Laundry System
Weakness CWE-89 · SQLi
Published April 8, 2026
Last update April 9, 2026

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

Description

A security vulnerability has been detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /userchecklogin.php. Such manipulation of the argument userid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Key dates

Disclosure timeline

April 8, 2026 CVE published
April 9, 2026 Record updated