https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T08:35:33.960556+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-108784 CVE-2026-108784 — macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error 2026-11-08T08:35:33.983260+00:00

Affected: macrozheng mall

A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manipulation of the argument total_amount results in business logic errors. The attack can be launched remotely. The exploit is now public and may be used. The patch is identified as dcaa93b3150352e5044708d7211b5bed0af4509f. A patch should be applied to remediate this issue.