← back
CVE-2026-7265

SourceCodester Pizzafy Ecommerce System index.php category sql injection

CVSS 5.3 MEDIUMEPSS 0.2%CWE-74CWE-89
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function Category of the file pizza/index.php?page=category. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Pizzafy Ecommerce System
public PoCs found — 1
cve_referencegithub.com/fernando-mengali/vulndb-submissions/blob/main/07-vul-SQLI.mdunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/fernando-mengali/vulndb-submissions/blob/main/07-vul-SQLI.mdhttps://vuldb.com/submit/802438https://vuldb.com/vuln/359916https://vuldb.com/vuln/359916/ctihttps://www.sourcecodester.com/