A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://github.com/ningfashui123/louplus/issues/1 Exploit, Issue Tracking, Mitigation, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · code-projectsNVD modified 2026-10-26 21:10
Affected (CPE criteria) 1
cpe:2.3:a:code-projects:simple_laundry_system:1.0:*:*:*:*:*:*:*
References 5
- https://code-projects.org/ Product
- https://github.com/ningfashui123/louplus/issues/1 Exploit, Issue Tracking, Mitigation, Third Party Advisory
- https://vuldb.com/submit/780723 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354447 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354447/cti Permissions Required, VDB Entry