CNNVD-202509-115 Information
Sep 02, 2025
cve
CNNVD ID
CNNVD-202509-115
Related CVE
- CNNVD Published: 2025-09-02
Description (Chinese)
mall是macro个人开发者的一套电商系统，包括前台商城系统及后台管理系统。 mall 1.0.3及之前版本存在安全漏洞，该漏洞源于对文件/order/paySuccess中参数orderId的错误操作导致授权绕过。
Description (English)
Mall is a set of electrician systems for Macro’s personal developers, including the front and back office management systems. mall 1.0.3 and previous versions have a security loophole, which stems from the error in the use of the parameter orderId in the document/order/paySuccess, resulting in the authorization circumvention.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-09-02
Last Modified
2026-02-24
References
https://vuldb.com/?submit.641738 https://vuldb.com/?id.322183 https://vuldb.com/?ctiid.322183 https://github.com/ez-lbz/poc/issues/47#issue-3354493935 https://access.redhat.com/security/cve/cve-2025-9836 https://nvd.nist.gov/vuln/detail/CVE-2025-9836
Share on: