CVE-2026-7226 | SourceCodester Pizzafy Ecommerce System 1.0 ajax.php?action=login2 e-mail sql injection

April 27, 2026 Yanac

A vulnerability marked as critical has been reported in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects the function login2 of the file /admin/ajax.php?action=login2. The manipulation of the argument e-mail leads to sql injection.

This vulnerability is referenced as CVE-2026-7226. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More