A SQL injection vulnerability was discovered in SourceCodester Pizzafy E-Commerce System version 1.0. The vulnerability affects the Login function in the admin panel file /admin/admin_class_novo.php, where manipulation of the Username parameter leads to SQL injection. The attack can be executed remotely and the exploit has been publicly disclosed, making it available for potential attackers to use against vulnerable systems.