2 matches found
CVE-2026-7394: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/vieworder.php of the component GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack may ...
5.8CVSS5.5AI score0.00332EPSS
SaveExploits1References3
CVE-2023-27210: Improper Neutralization of Special Elements used in an SQL Command
Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...
9.8CVSS5.8AI score0.00872EPSS
SaveExploits1References2
20