Pizzafy E-Commerce System vulnerabilities

2 known vulnerabilities in Pizzafy E-Commerce System from SourceCodester. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Pizzafy E-Commerce System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-14713Jul 5, 2026SourceCodester

  A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The manipulation of the argument ID results in sql injection. The attack can be launc

• 7.3 High severity

  Pizzafy E-Commerce System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-10704Jun 3, 2026SourceCodester

  A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the function Login of the file /admin/admin_class_novo.php of the component Administrative Control Panel. The manipulation of the argument Username