CVE-2026-7393 — SourceCodester Pizzafy Ecommerce System Unrestricted File Upload

CVE-2026-7393 — SourceCodester Pizzafy Ecommerce System Unrestricted File Upload

CVE-2026-7393 — A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file /admin/admin_class_novo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted upload. The attack is po

What This Means For You

  • If your environment is affected by CWE-284, CWE-434, review your exposure and prioritize patching based on your environment. Monitor vendor advisories for CVE-2026-7393 updates and patches.

Indicators of Compromise

IDTypeIndicator
CVE-2026-7393 vulnerability CVE-2026-7393
CWE-284 weakness CWE-284
CWE-434 weakness CWE-434
🔎
Turn this CVE into SIEM detection coverage Generate detection rules for Splunk, Sentinel, QRadar & Elastic — straight from this vulnerability. Use /detect in the Intel Bot.
Open Intel Bot →
Source & Attribution
Source PlatformNVD
ChannelNational Vulnerability Database
PublishedApril 29, 2026 at 20:16 UTC

This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.

Believe this infringes your rights? Submit a takedown request.

Related coverage

CVE-2026-7392 — SourceCodester Pharmacy Sales And Inventory System SQL Injection

CVE-2026-7392 — A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function delete_supplier of the file /ajax.php?action=delete_supplier. Such...

vulnerabilityCVEmedium-severitysql-injectioncwe-74cwe-89
/SCW Vulnerability Desk /MEDIUM /6.3 /⚑ 3 IOCs /⚙ 3 Sigma

CVE-2026-7391 — SourceCodester Pharmacy Sales And Inventory System SQL Injection

CVE-2026-7391 — A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function save_supplier of the file /ajax.php?action=save_supplier. This...

vulnerabilityCVEmedium-severitysql-injectioncwe-74cwe-89
/SCW Vulnerability Desk /MEDIUM /6.3 /⚑ 3 IOCs /⚙ 3 Sigma

CVE-2026-6915 — An authorization flaw in the user management command could

CVE-2026-6915 — An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another...

vulnerabilityCVEmedium-severitycwe-1284
/SCW Vulnerability Desk /MEDIUM /6.3 /⚑ 2 IOCs /⚙ 3 Sigma