CVE-2026-7228: SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function getcartcount of the file /admin/ajax.php?action=getcartcount. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7228?
CVE-2026-7228 is classified as a critical severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2026-7228?
To fix CVE-2026-7228, update the SourceCodester Pizzafy Ecommerce System to the latest version that addresses this SQL injection flaw.
What systems are affected by CVE-2026-7228?
CVE-2026-7228 specifically affects version 1.0 of the SourceCodester Pizzafy Ecommerce System.
How does CVE-2026-7228 exploit SQL injection?
CVE-2026-7228 exploits SQL injection through the manipulation of the ID argument in the get_cart_count function.
What are the potential impacts of CVE-2026-7228?
The potential impacts of CVE-2026-7228 include unauthorized access to database information and possible data corruption.