https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T14:43:44.999670+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110127 fkie_cve-2026-110127 2026-10-14T14:43:45.029175+00:00

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other members' cart items. Attackers can enumerate sequential cart ids via PUT /cart, POST /cart/changeNum, and DELETE /cart/{cartId} to change quantities, selection state, or remove items.

 https://db.gcve.eu/vuln/ghsa-3p8v-xvg4-95h3 GHSA-3p8v-xvg4-95h3 2026-10-14T14:43:45.029291+00:00

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other members' cart items. Attackers can enumerate sequential cart ids via PUT /cart, POST /cart/changeNum, and DELETE /cart/{cartId} to change quantities, selection state, or remove items.