CVE-2026-5564: code-projects Simple Laundry System Parameter searchguest.php sql injection
A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component Parameter Handler. This manipulation of the argument searchServiceId causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5564?
CVE-2026-5564 has been classified as a critical vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2026-5564?
To fix CVE-2026-5564, you should immediately update the Code-Projects Simple Laundry System to version 1.0 or later, applying any security patches provided.
Which component is affected by CVE-2026-5564?
CVE-2026-5564 affects the Parameter Handler functionality in the searchguest.php file of the Code-Projects Simple Laundry System.
Can CVE-2026-5564 lead to data exposure?
Yes, CVE-2026-5564 can allow attackers to execute arbitrary SQL queries, potentially exposing sensitive data.
Is CVE-2026-5564 present in earlier versions of the software?
CVE-2026-5564 is specifically present in version 1.0 of the Code-Projects Simple Laundry System and may not affect later versions if patched.