SourceCodester Pizzafy Ecommerce System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SourceCodester Pizzafy Ecommerce System: 27 record(s), with affected versions and fixes.
CVE-2026-7225
High · 7.3
CWE-74 Apr 28, 2026
SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function delete_menu of the file /admin/ajax.php?action=delete_menu. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-7224
High · 7.3
CWE-74 Apr 28, 2026
SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection
A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_cart of the file /admin/ajax.php?action=delete_cart. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.