Medium severity6.3NVD Advisory· Published Jun 2, 2026· Updated Jun 2, 2026

CVE-2026-10559

Description

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is an unknown function of the file /index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be performed from remote. The exploit has been published and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cyber Bhaskar10/CVE Writeupsreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
Sourcecodester/Pizzafy Ecommerce Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

github.com/cyber-bhaskar10/CVE-Writeups/blob/main/CVE%20Writeup%20LFI%20via%20Null%20Byte%20Injection%20in%20index.php.mdnvd
vuldb.com/cve/CVE-2026-10559nvd
vuldb.com/submit/828822nvd
vuldb.com/vuln/367649nvd
vuldb.com/vuln/367649/ctinvd
www.sourcecodester.comnvd

News mentions

SourceCodester: 17 Vulnerabilities Disclosed, Including SQLi and SSRF with Public Exploits
Vypr Intelligence · Jun 2, 2026

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000