# CVE-2026-5824: code-projects Simple Laundry System SQL injection in userchecklogin.php

Source: https://junglewise.ai/threats/cve-2026-5824-code-projects-simple-laundry-system-sql-injection-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-09. Updated: 2026-07-24  
License: CC BY 4.0 with a link back

CVE-2026-5824 · Severity: high · CVSS 7.3 · Published 2026-04-09

The Simple Laundry System, a web application for managing laundry service operations, contains a security flaw in its login processing component. An attacker can exploit this to bypass authentication, access the underlying database, and steal or modify sensitive customer and business information. This could lead to a total loss of data confidentiality and unauthorized control over the laundry management system.

Technologies: [Code-Projects Simple Laundry System](https://junglewise.ai/threats/technologies/simple-laundry-system). Vendors: [Code-Projects](https://junglewise.ai/threats/vendors/code-projects).

## Quick answers

**Is CVE-2026-5824 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-5824 being exploited in the wild.

**How severe is CVE-2026-5824?** High severity, with a CVSS score of 7.3, published 9 April 2026.

**Which products and versions are affected?** Code-Projects Simple Laundry System 1.0.

**Is there a fix for CVE-2026-5824?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-5824 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-5824?** Check whether you run Code-Projects Simple Laundry System at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A SQL injection vulnerability exists in code-projects Simple Laundry System 1.0 within the /userchecklogin.php file. The root cause is the improper neutralization of the 'userid' POST parameter before it is used in a SQL query. An unauthenticated remote attacker can provide specially crafted input (such as time-based blind payloads) to manipulate database queries. This can result in unauthorized access to sensitive data, data tampering, or full administrative bypass. A public exploit (PoC) has been disclosed, and the vulnerability can be exploited without any prior authentication or user interaction.

## Affected products

- code-projects Simple Laundry System 1.0

## Timeline

- 2026-03-25: disclosed: Vulnerability details and PoC shared on GitHub
- 2026-04-09: advisory: NVD publication date

## References

- [https://code-projects.org/](https://code-projects.org/)
- [https://github.com/lonelyuan/vunls/issues/1](https://github.com/lonelyuan/vunls/issues/1)
- [https://vuldb.com/submit/788302](https://vuldb.com/submit/788302)
- [https://vuldb.com/vuln/356271](https://vuldb.com/vuln/356271)
- [https://vuldb.com/vuln/356271/cti](https://vuldb.com/vuln/356271/cti)

## Related threats

- [code-projects Simple Laundry System XSS in delmemberinfo.php](https://junglewise.ai/threats/cve-2026-5825-code-projects-simple-laundry-system-xss-in-delmemberinfo-php)
- [code-projects Simple Laundry System SQL injection in delmemberinfo.php](https://junglewise.ai/threats/cve-2026-5565-code-projects-simple-laundry-system-sql-injection-in-delmemberinfo)
- [code-projects Simple Laundry System SQL injection in searchguest.php](https://junglewise.ai/threats/cve-2026-5564-code-projects-simple-laundry-system-sql-injection-in-searchguest)
- [code-projects Simple Laundry System XSS in modstaffinfo.php](https://junglewise.ai/threats/cve-2026-5542-code-projects-simple-laundry-system-xss-in-modstaffinfo-php)
- [code-projects Simple Laundry System XSS in modmemberinfo.php](https://junglewise.ai/threats/cve-2026-5541-code-projects-simple-laundry-system-xss-in-modmemberinfo-php)