Threats tagged 'ghsa-rgfp-2jfq-47mp'

SourceCodester Pizzafy Ecommerce System 1.0 contains a SQL injection vulnerability in the /admin/ajax.php?action=add_to_cart endpoint. The flaw arises from improper handling of the 'pid' parameter, allowing remote attackers with limited privileges to manipulate SQL queries. This vulnerability has a medium severity score and public exploit details have been disclosed.