CVE-2025-10426: itsourcecode Online Laundry Management System login.php sql injection

Published Sep 15, 2025

Updated

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

itsourcecode Online Laundry Management System

Campcodes Online Laundry Management System=1.0

Event History

Sep 15, 2025

CVE Published

via MITRE·04:32 AM

Data Sourced

via MITRE·04:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Dec 10, 57685

Event

via NVD·12:30 PM

Frequently Asked Questions

What is the severity of CVE-2025-10426?

CVE-2025-10426 has a high severity due to its potential for SQL injection vulnerabilities.

How do I fix CVE-2025-10426?

To fix CVE-2025-10426, implement parameterized queries or prepared statements to prevent SQL injection in the /login.php file.

What are the risks associated with CVE-2025-10426?

The risks associated with CVE-2025-10426 include unauthorized data access, data manipulation, and remote exploitation.

Who is affected by CVE-2025-10426?

Users of the itsourcecode Online Laundry Management System version 1.0 are affected by CVE-2025-10426.

Can CVE-2025-10426 be exploited remotely?

Yes, CVE-2025-10426 can be exploited remotely, allowing attackers to perform SQL injection attacks.