CVE-2026-7407: SourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injection
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function savesettings of the file /pizzafy/admin/ajax.php?action=savesettings of the component Setting Handler. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7407?
CVE-2026-7407 is classified as a high severity SQL injection vulnerability.
How can I fix CVE-2026-7407?
To fix CVE-2026-7407, validate and sanitize user inputs in the save_settings function to prevent SQL injection.
Which software versions are affected by CVE-2026-7407?
CVE-2026-7407 affects SourceCodester Pizzafy Ecommerce System version 1.0.
What type of vulnerability is CVE-2026-7407?
CVE-2026-7407 is an SQL injection vulnerability found in the ajax.php file.
Where in the code does CVE-2026-7407 occur?
CVE-2026-7407 occurs in the save_settings function of the /pizzafy/admin/ajax.php file.