CVE-2026-4850
HIGHcode-projects Simple Laundry System Parameter checkregisitem.php sql injection
Title source: cnaDescription
A security flaw has been discovered in code-projects Simple Laundry System 1.0. Affected is an unknown function of the file /checkregisitem.php of the component Parameter Handler. The manipulation of the argument Long-arm-shirtVol results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Scores
CVSS v3
7.3
EPSS
0.0003
EPSS Percentile
10.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-74
CWE-89
Status
published
Products (2)
code-projects/Simple Laundry System
1.0
code-projects/simple_laundry_system
1.0
Published
Mar 26, 2026
Tracked Since
Mar 26, 2026