CVE-2026-5825

In Simple Laundry System 1.0, the file /userchecklogin.php is vulnerable to SQL injection via the userid parameter. The attack can be launched remotely and the exploit has been disclosed.

A SQL injection vulnerability was found in Simple Laundry System 1.0 in the file /delmemberinfo.php via the userid parameter. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability was found in Simple Laundry System 1.0 in the file /searchguest.php via the searchServiceId parameter. The attack can be performed remotely and the exploit is publicly available.

A cross-site scripting (XSS) vulnerability was found in code-projects Simple Laundry System 1.0 in the file /modstaffinfo.php. Manipulating the userid argument allows remote script injection. The exploit has been publicly disclosed.

The Simple Laundry System 1.0 has an XSS vulnerability in the file /modmemberinfo.php. Manipulation of the userid argument leads to reflected XSS. The attack can be launched remotely, and the exploit has been published.

The Simple Laundry System 1.0 has an XSS vulnerability in the file /modifymember.php. Manipulation of the firstName argument leads to reflected XSS. The attack can be launched remotely, and the exploit has been published.