Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-16226

SourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload

Description

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_settings of the file /admin/admin_class_novo.php. This manipulation of the argument img causes unrestricted upload. The attack is possible to be carried out remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SourceCodester Pizzafy Ecommerce System

  • 1.0affected

References