CVE-2026-7409: SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function saveuser of the file /admin/ajax.php?action=saveuser. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7409?
The severity of CVE-2026-7409 is rated as critical due to its potential for SQL injection attacks.
How do I fix CVE-2026-7409?
To fix CVE-2026-7409, update the SourceCodester Pizzafy Ecommerce System to the latest version or apply the necessary patches to sanitize user input in the save_user function.
What systems are impacted by CVE-2026-7409?
CVE-2026-7409 impacts SourceCodester Pizzafy Ecommerce System version 1.0 specifically.
What kind of attack can be executed through CVE-2026-7409?
CVE-2026-7409 allows attackers to execute SQL injection attacks via the save_user function in the ajax.php file.
Is CVE-2026-7409 being actively exploited?
There have been reports indicating that CVE-2026-7409 has the potential to be actively exploited by malicious actors.