Is CVE-2026-5565 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-5565 being exploited in the wild.

How severe is CVE-2026-5565?

High severity, with a CVSS score of 7.3, published 5 April 2026.

Is there a fix for CVE-2026-5565?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-5565 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-5565?

Check whether you run Code-Projects Simple Laundry System at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-5565: code-projects Simple Laundry System SQL injection in delmemberinfo.php

CVE-2026-5565 · Severity: high · CVSS 7.3 · Published 2026-04-05

A security vulnerability exists in Simple Laundry System, a software application used to manage laundry business operations. An attacker can exploit this flaw to gain unauthorized access to the underlying database, potentially leading to the theft of customer information, tampering with records, or disruption of business services. This attack can be carried out remotely without requiring any login credentials.

Technologies: Code-Projects Simple Laundry System. Vendors: Code-Projects.

Quick answers

Is CVE-2026-5565 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-5565 being exploited in the wild.
How severe is CVE-2026-5565?: High severity, with a CVSS score of 7.3, published 5 April 2026.
Which products and versions are affected?: Code-Projects Simple Laundry System 1.0.
Is there a fix for CVE-2026-5565?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-5565 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-5565?: Check whether you run Code-Projects Simple Laundry System at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A SQL injection vulnerability exists in code-projects Simple Laundry System 1.0 within the 'Parameter Handler' component. The root cause is the improper neutralization of special elements in the 'userid' parameter of the /delmemberinfo.php file. A remote, unauthenticated attacker can exploit this by sending specially crafted GET requests to manipulate SQL queries. Successful exploitation allows for unauthorized database access, data exfiltration, and potential full system compromise. Public exploits, including boolean-based blind, error-based, and UNION-based payloads, have been disclosed. No official patch is currently documented; remediation should involve implementing prepared statements and input validation.

Affected products

code-projects Simple Laundry System 1.0

Timeline

2026-03-19: disclosed: Public issue report on GitHub with PoC
2026-04-05: advisory: Initial publication of CVE-2026-5565

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.