CVE-2026-7227 in Pizzafy Ecommerce System

Zusammenfassung

von MITRE • 28.04.2026

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the argument e-mail results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Zuständig: VulDB
• Veröffentlichung: 28.04.2026
• Moderieren: akzeptiert
• Eintrag: VDB-359827
• CPE: bereit
• CWE: CWE-89 (bestätigt)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00043
• KEV: nein
• Aktivitäten: very low
• Sektor: Transportation, Telecommunication, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7227
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7227
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7227/