CVE-2026-5565
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A SQL injection vulnerability was found in Simple Laundry System 1.0 in the file /delmemberinfo.php via the userid parameter. The attack can be performed remotely and the exploit is publicly available.
Risk Assessment
An attacker can remotely manipulate the database, potentially leading to data leakage or modification.
Recommendation
Immediately update the system to the latest version or apply a patch to prevent SQL injection.
Other vulnerabilities in Simple Laundry System
See all- CVE-2026-6150Medium
A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /checkupdatestatus.php. Manipulation of the serviceId argument leads to cross-site scripting. The attack can be initiated remotely and the exploit has been disclosed to the public.
- CVE-2026-6032Medium
In code-projects Simple Laundry System 1.0, manipulation of the serviceId argument in /checkcheckout.php results in cross-site scripting (XSS). The attack can be carried out remotely and the exploit has been publicly disclosed.
- CVE-2026-5825Medium
code-projects Simple Laundry System 1.0 has a cross-site scripting vulnerability in /delmemberinfo.php via the userid argument. The attack can be initiated remotely. The exploit is public and may be used.
- CVE-2026-5824High
In Simple Laundry System 1.0, the file /userchecklogin.php is vulnerable to SQL injection via the userid parameter. The attack can be launched remotely and the exploit has been disclosed.
- CVE-2026-5564High
A SQL injection vulnerability was found in Simple Laundry System 1.0 in the file /searchguest.php via the searchServiceId parameter. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-5542Medium
A cross-site scripting (XSS) vulnerability was found in code-projects Simple Laundry System 1.0 in the file /modstaffinfo.php. Manipulating the userid argument allows remote script injection. The exploit has been publicly disclosed.
- CVE-2026-5541Medium
The Simple Laundry System 1.0 has an XSS vulnerability in the file /modmemberinfo.php. Manipulation of the userid argument leads to reflected XSS. The attack can be launched remotely, and the exploit has been published.
- CVE-2026-5539Medium
The Simple Laundry System 1.0 has an XSS vulnerability in the file /modifymember.php. Manipulation of the firstName argument leads to reflected XSS. The attack can be launched remotely, and the exploit has been published.
- CVE-2026-5255Medium
A vulnerability was detected in code-projects Simple Laundry System 1.0. It affects an unknown part of the file /delstaffinfo.php of the Parameter Handler component. Manipulation of the userid argument results in cross site scripting.
Original NVD description (English source)
A security vulnerability has been detected in code-projects Simple Laundry System 1.0. Affected by this issue is some unknown functionality of the file /delmemberinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

