CVE-2026-4579

critical

Published 2026-03-23 · Modified 2026-04-29

CVSS v3

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2

7.5

VIR risk

9.8

Description

A vulnerability was identified in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /viewdetail.php of the component Parameters Handler. The manipulation of the argument serviceId leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Predictions

Exploit likelihood

97%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cna@vuldb.com — https://github.com/anon387tdug/anon388/issues/3

Application impact

Vendor	Product	Versions	Fixed
code-projects	simple_laundry_system	`1.0`

References

https://code-projects.org/
https://github.com/anon387tdug/anon388/issues/3
https://vuldb.com/?ctiid.352416
https://vuldb.com/?id.352416
https://vuldb.com/?submit.775209

CWEs

CWE-74 CWE-89

Verify integrity in audit chain (admin only). AS-IS.