CVE-2026-7410: SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection
A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=addtocart. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7410?
CVE-2026-7410 has a high severity rating due to its potential for SQL injection exploitation.
How do I fix CVE-2026-7410?
To mitigate CVE-2026-7410, sanitize all user inputs, particularly the 'pid' parameter in the AJAX request.
What systems are affected by CVE-2026-7410?
CVE-2026-7410 affects SourceCodester Pizzafy Ecommerce System version 1.0.
Can CVE-2026-7410 lead to data breaches?
Yes, CVE-2026-7410 can lead to unauthorized access and data breaches if exploited.
How is CVE-2026-7410 exploited?
CVE-2026-7410 is exploited through SQL injection via manipulating the 'pid' parameter in the add_to_cart action.