CNNVD-202509-4217 Information
Sep 26, 2025
cve
CNNVD ID
CNNVD-202509-4217
Related CVE
- CNNVD Published: 2025-09-26
Description (Chinese)
roncoo-pay（龙果支付系统）是领课网络（RonCoo）开源的一个互联网支付系统。 roncoo-pay存在授权问题漏洞，该漏洞源于文件/user/info/lookupList中未知函数存在授权不当，可能导致远程攻击。
Description (English)
Roncoo-pay (Rongo Payment System) is an Internet payment system that is an open source for the RonCoo network. roncoo-pay has a mandate loophole, which stems from the improper authorization of unknown functions in the document/user/info/lookupList, which may lead to a remote attack.
Hazard Level
High
Vulnerability Type
授权问题
Affected Vendor
领课网络
Published
2025-09-26
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.325919 https://vuldb.com/?id.325919 https://vuldb.com/?submit.653738 https://www.cnblogs.com/aibot/p/19063472
Share on: