CVE-2026-7408: SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function savemenu of the file /admin/ajax.php?action=savemenu. Performing a manipulation results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7408?
CVE-2026-7408 is classified as a high severity vulnerability due to its exploitation potential for SQL injection attacks.
How do I fix CVE-2026-7408?
To fix CVE-2026-7408, input validation and parameterized queries should be implemented in the save_menu function to prevent SQL injection.
What version of SourceCodester Pizzafy Ecommerce System is affected by CVE-2026-7408?
CVE-2026-7408 affects SourceCodester Pizzafy Ecommerce System version 1.0.
What type of vulnerability is CVE-2026-7408?
CVE-2026-7408 is an SQL injection vulnerability that allows attackers to manipulate database queries.
Where in the SourceCodester Pizzafy Ecommerce System can I find CVE-2026-7408?
CVE-2026-7408 is located in the save_menu function within the file /admin/ajax.php.