CVE-2026-7393: SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload
A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function savemenu of the file /admin/adminclassnovo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7393?
The severity of CVE-2026-7393 is classified as high due to unrestricted file upload capabilities.
How do I fix CVE-2026-7393?
To fix CVE-2026-7393, ensure strict validation of file uploads in the save_menu function of admin_class_novo.php.
What software is affected by CVE-2026-7393?
CVE-2026-7393 affects SourceCodester Pizzafy Ecommerce System version 1.0.
What type of vulnerability is CVE-2026-7393?
CVE-2026-7393 is an unrestricted file upload vulnerability in the Pizzafy Ecommerce System.
What are the risks associated with CVE-2026-7393?
The risks associated with CVE-2026-7393 include the potential for remote code execution and unauthorized access to server resources.