PT-2026-35712 · Sourcecodester · Pizzafy Ecommerce System

Fernando Mengali · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-7268

Mitre

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save category of the file /admin/ajax.php?action=save category. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-7268

Affected Products

Pizzafy Ecommerce System

References · 7

• 🔥 https://github.com/fernando-mengali/vulndb-submissions/blob/main/10-vul-SQLI.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7268 · Security Note
• https://vuldb.com/vuln/359919 · Note
• https://vuldb.com/vuln/359919/cti · Note
• https://vuldb.com/submit/803171 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/submit/802465 · Note