Skip to content
OpenAdvisories

Product · BizSpring

BizSpring Java Mall

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-110608

    BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive

    BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderController cancel and receive handlers that allows authenticated members to act on other members' orders by supplying their orderId. Attackers ca…

    BizSpring BizSpring Shop BizSpring Java Mall
  • Medium 6.5
    CVE-2026-110607

    BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint

    BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment…

    BizSpring BizSpring Java Mall BizSpring Shop