CVE-2026-7268 | SourceCodester Pizzafy Ecommerce System 1.0 ajax.php?action=save_category Name sql injection

April 28, 2026 Yanac

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. It has been declared as critical. This impacts the function save_category of the file /admin/ajax.php?action=save_category. Such manipulation of the argument Name leads to sql injection.

This vulnerability is listed as CVE-2026-7268. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More