Volerion logoVolerion
Volerion logoVolerion

SourceCodester Pizzafy Ecommerce System Unrestricted File Upload Vulnerability

Vulnerability

A vulnerability allowing unrestricted file uploads has been identified in SourceCodester Pizzafy Ecommerce System version 1.0. The issue arises in the 'save_settings' function within '/admin/admin_class_novo.php', where the 'img' argument can be manipulated to upload files without restriction. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for unrestricted file uploads, which could lead to the execution of malicious files on the server.

Added: Jul 19, 2026, 9:26 AM
Updated: Jul 19, 2026, 9:26 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
5.2
remediation
0.0
relevance
9.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.