Skip to content
OpenAdvisories

Product · SourceCodester

Pizzafy Ecommerce System

25 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-7394 Public exploit

    SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection

    A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/view_order.php of the component GET Parameter Handler. Executing a manipulation of the argument ID can…

    SourceCodester Pizzafy Ecommerce System
  • Medium 4.7
    CVE-2026-7393 Public exploit

    SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload

    A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file /admin/admin_class_novo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted…

    SourceCodester Pizzafy Ecommerce System
  • High 7.3
    CVE-2026-7228 Public exploit

    SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection

    A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_count of the file /admin/ajax.php?action=get_cart_count. This manipulation of the argument ID causes sql injection. The attack is possible to b…

    SourceCodester Pizzafy Ecommerce System