Skip to content
OpenAdvisories

Product · SourceCodester

Pizzafy Ecommerce System

25 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-7394 Public exploit

    SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection

    A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/view_order.php of the component GET Parameter Handler. Executing a manipulation of the argument ID can…

  • Medium 4.7
    CVE-2026-7393 Public exploit

    SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload

    A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file /admin/admin_class_novo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted…