CVE-2026-7394 - Vulnerability Analysis

Overview

SourceCodester Pizzafy Ecommerce System 1.0 contains a sql injection caused by manipulation of the "ID" GET parameter in /admin/view_order.php, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version or apply vendor patches addressing this vulnerability.

References

• https://vuldb.com/vuln/360119/cti
• https://www.sourcecodester.com/
• https://github.com/Xmyronn/SQL-Injection-in-Pizzafy-Ecommerce-System-admin-view_order.php.git
• https://vuldb.com/submit/803523
• https://vuldb.com/vuln/360119

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner