Lucene search
+L

16364 matches found

Vulnrichment
Vulnrichment
added 2026/04/28 4:30 a.m.5 views

CVE-2026-7225 SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function deletemenu of the file /admin/ajax.php?action=deletemenu. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/28 4:15 a.m.37 views

CVE-2026-7224 SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection

A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function deletecart of the file /admin/ajax.php?action=deletecart. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.00254EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/28 4:15 a.m.14 views

CVE-2026-7224

A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function deletecart of the file /admin/ajax.php?action=deletecart. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS5.4AI score0.00254EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/04/28 4:15 a.m.9 views

EUVD-2026-25988

A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function deletecart of the file /admin/ajax.php?action=deletecart. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS5.4AI score0.00254EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/28 4:15 a.m.19 views

CVE-2026-7224

SourceCodester Pizzafy Ecommerce System 1.0 is affected by a SQL injection in the admin/ajax.php?action=delete_cart handler, triggered by manipulating the ID parameter in delete_cart. The vulnerability arises from unsafely constructed SQL in delete_cart, allowing remote attackers to exploit it wi...

7.5CVSS7.3AI score0.00254EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.11 views

PT-2026-35661

A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete cart of the file /admin/ajax.php?action=delete cart. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS7.3AI score0.00254EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.11 views

PT-2026-35726

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

4.8CVSS3AI score0.00206EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.16 views

SourceCodester Pizzafy Ecommerce System 注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

6.5CVSS6.6AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.13 views

SourceCodester Safety Anger Pad 跨站脚本漏洞

SourceCodester Safety Anger Pad is an open-source security warning software developed by SourceCodester. Version 1.0 of SourceCodester Safety Anger Pad contains a cross-site scripting vulnerability. This vulnerability stems from the angerDisplay parameter, which has cross-site scripting...

5.3CVSS5.7AI score0.00263EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.5 views

PT-2026-35732

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete expired of the file /ajax.php?action=delete expired. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit i...

5.8CVSS5.1AI score0.00206EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.13 views

SourceCodester Pizzafy Ecommerce System 注入漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System has a vulnerability related to SQL injection, which stems from the operation of the Category function in the...

6.5CVSS6.7AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.13 views

SourceCodester Pharmacy Sales and Inventory System 跨站脚本漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a cross-site scripting vulnerability. This vulnerability stems from the...

4.8CVSS5.6AI score0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.15 views

SourceCodester Pizzafy Ecommerce System 注入漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System has a vulnerability related to SQL injection, which stems from the savecategory function in the admin/ajax.php?action=savecategory...

6.5CVSS6.7AI score0.002EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.12 views

PT-2026-35741

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function save expired of the file /ajax.php?action=save expired. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit...

5.8CVSS5.1AI score0.00263EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.17 views

SourceCodester Pizzafy Ecommerce System 注入漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System has a SQL injection vulnerability. This vulnerability stems from the ID parameter in the deletecart function of the...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.12 views

SourceCodester Pharmacy Sales and Inventory System 注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the saveexpired...

5.8CVSS5.9AI score0.00263EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.15 views

SourceCodester Pizzafy Ecommerce System 注入漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System has a vulnerability related to SQL injection, which stems from the operation of the getcartitems function in the...

6.5CVSS6.7AI score0.0025EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.10 views

PT-2026-35814

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save settings of the file /admin/index.php?page=save settings. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit...

4.8CVSS3.2AI score0.00206EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.10 views

PT-2026-35717

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit has...

4.8CVSS3.3AI score0.0021EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.10 views

PT-2026-35705

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function get cart items of the file /admin/ajax.php?action=get cart items. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References6
Rows per page
Query Builder