CVE-2026-16226 | SourceCodester Pizzafy Ecommerce System 1.0 admin_class_novo.php save_settings img unrestricted upload

July 18, 2026 Yanac

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0 and classified as critical. This affects the function save_settings of the file /admin/admin_class_novo.php. This manipulation of the argument img causes unrestricted upload.

This vulnerability is tracked as CVE-2026-16226. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More