A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://github.com/kunlan567-boop/test/issues/1 Exploit, Issue Tracking, Mitigation, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · code-projectsNVD modified 2026-10-26 21:10
Affected (CPE criteria) 1
cpe:2.3:a:code-projects:simple_laundry_system:1.0:*:*:*:*:*:*:*
References 5
- https://code-projects.org/ Product
- https://github.com/kunlan567-boop/test/issues/1 Exploit, Issue Tracking, Mitigation, Third Party Advisory
- https://vuldb.com/submit/780618 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354446 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354446/cti Permissions Required, VDB Entry