CVE-2026-7409 in Pizzafy Ecommerce System

Tóm tắt

Bởi MITRE • 30/04/2026

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_user of the file /admin/ajax.php?action=save_user. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• chịu trách nhiệm: VulDB
• Tiết lộ: 30/04/2026
• Kiểm duyệt: được chấp nhận
• mục: VDB-360143
• CPE: sẵn sàng
• CWE: CWE-89 (Đã xác nhận)
• Khai thác: Tải xuống
• CVSS: 4.7 (VulDB)
• EPSS: 0.00039
• KEV: không
• Các hoạt động: rất thấp
• ngành: Transportation, Hostingprovider, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7409
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7409
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7409/