PT-2026-35712 · Sourcecodester · Pizzafy Ecommerce System

Fernando Mengali · Publicado 2026-04-28 · Atualizado 2026-04-28 · CVE-2026-7268

Mitre

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save category of the file /admin/ajax.php?action=save category. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-7268

Produtos afetados

Pizzafy Ecommerce System

Referências · 7

• 🔥 https://github.com/fernando-mengali/vulndb-submissions/blob/main/10-vul-SQLI.md · Exploit
• https://vuldb.com/vuln/359919 · Nota
• https://vuldb.com/vuln/359919/cti · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-7268 · Nota de Segurança
• https://vuldb.com/submit/803171 · Nota
• https://sourcecodester.com · Nota
• https://vuldb.com/submit/802465 · Nota