sourcecodester pizzafy e-commerce system vulnerabilities

Latest sourcecodester pizzafy e-commerce system CVEs

Newest publication first

1. CVE-2026-14713 SourceCodester Pizzafy E-Commerce System ajax.php confirm_order sql injection

   Published 2026-07-05

   Medium·CVSS 6.9 EPSS 0.43%

   A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The ex...

2. CVE-2026-10704 SourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection

   Published 2026-06-03

   Medium·CVSS 6.9 EPSS 0.28%

   A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the function Login of the file /admin/admin_class_novo.php of the component Administrative Control Panel. The manipulation of the argument Username results in sql injec...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.