Dashboard / CVE-2026-5257

CVE-2026-5257

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 71/100
Published: 2026-04-01 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
code-projects simple_laundry_system 1.0

References & Advisories (5)

https://vuldb.com/submit/780723
Third Party Advisory VDB Entry
https://vuldb.com/vuln/354447
Third Party Advisory VDB Entry
https://vuldb.com/vuln/354447/cti
Permissions Required VDB Entry
https://github.com/ningfashui123/louplus/issues/1
Exploit Issue Tracking Mitigation

Bug Bounty Relevance

71 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.34%
Raw Score 0.003390
Percentile 27.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00339
2026-10-28
0.00333

Intelligence Sources

nvd ref →

External Links