CVE-2026-7409 in Pizzafy Ecommerce System

الملخص

بحسب MITRE • 30/04/2026

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_user of the file /admin/ajax.php?action=save_user. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• مسؤول: VulDB
• إفشاء: 30/04/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-360143
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• استغلال: تحميل
• CVSS: 4.7 (VulDB)
• EPSS: 0.00039
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider, Telecommunication, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7409
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7409
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7409/