https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T12:26:01.308346+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110607 CVE-2026-110607 — BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint 2026-10-15T12:26:01.312338+00:00

Affected: BizSpring Shop, BizSpring Java Mall

BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request /member/payment/test_post_pay_{paymentLogSn} to obtain goods without paying or settle other members' orders.