PT-2026-35709 · Sourcecodester · Pizzafy Ecommerce System

Fernando Mengali · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-7265

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function Category of the file pizza/index.php?page=category. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-7265

Affected Products

Pizzafy Ecommerce System

References · 7

• 🔥 https://github.com/fernando-mengali/vulndb-submissions/blob/main/07-vul-SQLI.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7265 · Security Note
• https://vuldb.com/vuln/359916 · Note
• https://vuldb.com/vuln/359916/cti · Note
• https://twitter.com/VulmonFeeds/status/2049093567071596893 · Twitter Post
• https://sourcecodester.com · Note
• https://vuldb.com/submit/802438 · Note