CVE-2026-5540

HIGH

code-projects Simple Laundry System Parameter modifymember.php sql injection

Title source: cna
STIX 2.1

Description

A vulnerability has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modifymember.php of the component Parameter Handler. Such manipulation of the argument firstName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

References (5)

Core 5
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-355293 | code-projects Simple Laundry System Parameter modifymember.php sql injection
https://vuldb.com/vuln/355293
Signature, Permissions Required signature permissions-required
VDB-355293 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/355293/cti
Third Party Advisory third-party-advisory
Submit #782222 | code-projects Simple Laundry System V1.0 SQL injection
https://vuldb.com/submit/782222
Product product
https://code-projects.org/

Scores

CVSS v3 7.3
EPSS 0.0027
EPSS Percentile 18.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
code-projects/Simple Laundry System 1.0
Published Apr 05, 2026
Tracked Since Apr 05, 2026