The SourceCodester Pizzafy Ecommerce System 1.0 contains a critical SQL injection vulnerability that allows unauthenticated remote attackers to extract sensitive database information.

The application is susceptible to an error-based SQL injection within the /admin/ajax.php endpoint. By manipulating the id parameter in the delete_cart function, an unauthenticated attacker can inject malicious SQL queries to bypass security controls and retrieve database content.

Successful exploitation of this vulnerability allows unauthorized access to the underlying database, leading to potential exfiltration of user credentials, sensitive business information, and administrative session data. Given the CVSS score of 7.3, this flaw poses a high risk to the confidentiality and integrity of the application, potentially resulting in full system compromise or unauthorized modification of records.

Immediate Action: As no official vendor patch is available, developers must manually implement input sanitization by casting the id parameter to an integer or using prepared statements in the delete_cart function to neutralize malicious input.

Proactive Monitoring: Security teams should monitor web server access logs for anomalous POST requests to /admin/ajax.php containing SQL syntax or error-generating functions like extractvalue.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns in incoming HTTP requests to the vulnerable endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists via the technical write-up provided in the vulnerability submission on GitHub.

Due to the availability of a public proof-of-concept and the ease of exploitation, this vulnerability should be prioritized for immediate remediation. Organizations currently running this software must apply the suggested code-level fixes immediately or restrict access to the administrative interface until a permanent solution is provided by the vendor.