CVE-2026-7267: SourceCodester Pizzafy Ecommerce System view_prod.php sql injection
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unknown function of the file /viewprod.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7267?
CVE-2026-7267 is categorized as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2026-7267?
To fix CVE-2026-7267, it is recommended to sanitize user input in the view_prod.php file to prevent SQL injection.
What systems are affected by CVE-2026-7267?
CVE-2026-7267 affects version 1.0 of the SourceCodester Pizzafy Ecommerce System.
What type of attack is facilitated by CVE-2026-7267?
CVE-2026-7267 facilitates SQL injection attacks through improper handling of the argument ID in the affected script.
Is it possible to exploit CVE-2026-7267 remotely?
Yes, CVE-2026-7267 can be exploited remotely since it involves manipulating a web application's input.