CVE-2025-5764

CVE-2025-5764 concerns code-projects Laundry System 1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /data/insert_laundry.php file, triggered by manipulating the Customer parameter. Attackers may exploit this remotely, and the exploit has been publicly disclosed. Public document...

CVE-2025-5765

CVE-2025-5765 affects code-projects Laundry System 1.0, with a cross-site scripting vulnerability in /data/edit_laundry.php via the Customer parameter. Root cause is improper input handling/escaping of user-supplied data, enabling arbitrary script execution. Exploitation is possible remotely and ...

CVE-2025-5797

Code-projects Laundry System 1.0 contains a cross-site scripting (XSS) vulnerability in /data/insert_type.php via the Type parameter. The issue allows remote attacker input to inject scripts; exploit has been disclosed publicly and may be used. Supported by CNVD/CNNVD entries. There is no patch i...

CVE-2025-5796

CVE-2025-5796 concerns code-projects Laundry System 1.0. The vulnerability is a cross-site scripting flaw in the parameter Type of the file /data/edit_type.php . Publicly disclosed exploit enables remote abuse; multiple sources describe the issue as an input-filter/escaping weakness affecting unk...

CVE-2025-5766

CVE-2025-5766 concerns a cross-site request forgery in the code-projects Laundry System 1.0 . The vulnerability arises from a web application that does not adequately validate that a request comes from a trusted user, enabling an attacker to spoof a malicious request to trigger a sensitive operat...

CVE-2026-4784

The CVE-2026-4784 vulnerability affects code-projects Simple Laundry System 1.0, specifically the Parameter Handler’s /checkcheckout.php and its serviceId parameter. The root cause allows SQL injection in a remote-exploit scenario, with the exploit already public and potentially usable. Multiple ...

CVE-2026-5256

CVE-2026-5256 affects code-projects Simple Laundry System 1.0. The vulnerability is in the Parameter Handler’s modify.php, where manipulation of the firstName parameter leads to SQL injection. Remote exploitation is possible, and the exploit has been published and may be used. The available conne...

CVE-2026-5257

The CVE-2026-5257 entry concerns code-projects Simple Laundry System 1.0. The vulnerability affects the Parameter Handler component, specifically the /delstaffinfo.php file, where manipulating the userid parameter leads to a SQL injection. The issue is exploitable remotely, and public disclosures...

CVE-2026-4849

CVE-2026-4849 affects code-projects Simple Laundry System 1.0. The vulnerability is in the /modify.php file within the Parameter Handler, where manipulating the firstName argument leads to cross-site scripting (XSS). The impact is described as Low integrity impact with no confidentiality or avail...

CVE-2026-4908

The CVE-2026-4908 entry concerns code-projects Simple Laundry System 1.0. The vulnerability resides in the Parameter Handler’s modstaffinfo.php, where manipulating the userid parameter enables SQL injection. The flaw is exploitable remotely and has seen public exploit activity. Connected sources ...

CVE-2026-5255

CVE-2026-5255 affects code-projects Simple Laundry System 1.0, specifically an issue in the Parameter Handler’s delstaffinfo.php where manipulating the userid parameter triggers cross-site scripting. The vulnerability can be exploited remotely, and the exploit is public, indicating potential real...

CVE-2026-4579

The CVE-2026-4579 entry concerns code-projects Simple Laundry System 1.0, specifically the file /viewdetail.php in the Parameters Handler component. The vulnerability is triggered by manipulating the serviceId argument, leading to SQL injection. Remote exploitation is possible, and an exploit is ...

CVE-2026-4581

The CVE-2026-4581 entry concerns code-projects Simple Laundry System 1.0. The vulnerability lies in the unknown function within the file /checklogin.php of the Parameters Handler, where manipulating the Username argument triggers a SQL injection. This can be exploited remotely, and exploits have ...

CVE-2026-4850

CVE-2026-4850 affects code-projects Simple Laundry System 1.0. Affected component: Parameter Handler, file /checkregisitem.php. Root cause: manipulation of the Long-arm-shirtVol argument enables SQL injection. Attack vector is remote; exploit publicly released. Multiple sources (NVD, CVE records,...

CVE-2026-4580

The CVE-2026-4580 entry concerns code-projects Simple Laundry System 1.0, where the /checkupdatestatus.php endpoint in the Parameters Handler is vulnerable. The issue arises from manipulating the serviceId parameter, enabling SQL injection. The vulnerability is described as exploitable remotely, ...