CVE-2025-9836 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in macrozheng mall up to 1.0.3. This vulnerability affects the function paySuccess of the file /order/paySuccess. The manipulation of…
Medium CVSS: 5.3

CVE-2025-9836

A vulnerability was found in macrozheng mall up to 1.0.3. This vulnerability affects the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderId results in authorization bypass. The attack can be launched remotely. The exploit has been made public and could be used.
Vendor
Macrozheng
Product
Mall
CWE
CWE-285
Yayın Tarihi
2025-09-02 22:15:33
Güncelleme
2025-11-26 16:29:06
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-285 Mall MEDIUM Macrozheng 2025

Referanslar

https://github.com/ez-lbz/poc/issues/47 https://github.com/ez-lbz/poc/issues/47#issue-3354493935 https://vuldb.com/?ctiid.322183 https://vuldb.com/?id.322183 https://vuldb.com/?submit.641738