Sourcecodester Pizzafy Ecommerce System vulnerabilities, page 2

25 vulnerabilities

Known vulnerabilities in Sourcecodester Pizzafy Ecommerce System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.8CVE-2026-7394sourcecodesterpizzafy ecommerce system
EPSS score
0.33%
A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/view_order.php of the component GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.5.8CVE-2026-7293sourcecodesterpizzafy ecommerce system
EPSS score
0.33%
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function delete_category of the file /admin/ajax.php?action=delete_category. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.6.5CVE-2026-10559sourcecodesterpizzafy ecommerce system
EPSS score
0.23%
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is an unknown function of the file /index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be performed from remote. The exploit has been published and may be used.6.5CVE-2026-10558sourcecodesterpizzafy ecommerce system
EPSS score
0.23%
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument page results in file inclusion. The attack is possible to be carried out remotely. The exploit is now public and may be used.5.3CVE-2026-8117sourcecodesterpizzafy ecommerce system
EPSS score
0.45%
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects some unknown processing of the file /admin/index.php. Such manipulation of the argument page leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.