Pizzafy Ecommerce System
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:pizzafy_ecommerce_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Pizzafy Ecommerce System (2025ff40-cbfd-5971-9775-0453de03b31f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16226 |
vulnerable | 2026-07-29 00:26:18.610655 |
SourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload
MEDIUM (4.7)
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_settings of the file /admin/admin_class_novo.php. This manipulation of the argument img causes unrestricted upload. The attack is possible to be carried out remotely.
Published: 2026-07-19T08:15:08.198Z
Updated: 2026-07-20T13:20:54.419Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8117 |
vulnerable | 2026-06-08 08:08:58.120077 |
SourceCodester Pizzafy Ecommerce System index.php cross site scripting
MEDIUM (4.3)
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects some unknown processing of the file /admin/index.php. Such manipulation of the argument page leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-05-07T23:45:10.695Z
Updated: 2026-05-08T11:43:56.619Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7410 |
vulnerable | 2026-06-08 08:08:57.180860 |
SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=add_to_cart. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-04-29T21:15:14.051Z
Updated: 2026-05-04T13:20:15.894Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7409 |
vulnerable | 2026-06-08 08:08:57.180576 |
SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection
MEDIUM (4.7)
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_user of the file /admin/ajax.php?action=save_user. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
Published: 2026-04-29T21:00:14.298Z
Updated: 2026-04-30T13:54:07.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7408 |
vulnerable | 2026-06-08 08:08:57.180270 |
SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection
MEDIUM (4.7)
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function save_menu of the file /admin/ajax.php?action=save_menu. Performing a manipulation results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Published: 2026-04-29T20:45:13.734Z
Updated: 2026-04-30T13:09:46.095Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7407 |
vulnerable | 2026-06-08 08:08:57.179851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7394 |
vulnerable | 2026-06-08 08:08:57.161203 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7393 |
vulnerable | 2026-06-08 08:08:57.160921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7297 |
vulnerable | 2026-06-08 08:08:56.808526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7296 |
vulnerable | 2026-06-08 08:08:56.808209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7295 |
vulnerable | 2026-06-08 08:08:56.807843 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7294 |
vulnerable | 2026-06-08 08:08:56.807562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7293 |
vulnerable | 2026-06-08 08:08:56.807265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7268 |
vulnerable | 2026-06-08 08:08:56.730514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7267 |
vulnerable | 2026-06-08 08:08:56.730086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7266 |
vulnerable | 2026-06-08 08:08:56.729562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7265 |
vulnerable | 2026-06-08 08:08:56.729085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7264 |
vulnerable | 2026-06-08 08:08:56.728242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7228 |
vulnerable | 2026-06-08 08:07:05.538446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7227 |
vulnerable | 2026-06-08 08:07:05.538010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7226 |
vulnerable | 2026-06-08 08:07:05.537678 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7225 |
vulnerable | 2026-06-08 08:07:05.537206 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7224 |
vulnerable | 2026-06-08 08:07:05.536785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10559 |
vulnerable | 2026-06-08 07:47:13.813779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10558 |
vulnerable | 2026-06-08 07:47:13.813482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.