CVE-2026-109410

A vulnerability exists in macrozheng mall version 1.0.3 dcaa93b within the mall-admin/mall-portal component. The flaw is located in the OmsOrderServiceImpl.updateMoneyInfo function of the /order/update/moneyInfo file, where a logic error leads to an incorrect calculation (CWE-682). This vulnerabi...

CVE-2026-109410

A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads to incorrect calculation. The attack can be initiated...

CVE-2026-109406

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument couponamount/payamount causes business logic errors. The attack is...

CVE-2026-109407

A security vulnerability exists in macrozheng mall versions up to 1.0.3 . The issue originates from an unknown processing error within the Coupon Redemption component, specifically involving the file /order/generateOrder . Manipulation of the couponId argument can trigger a race condition (CWE-36...

CVE-2026-109407

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads to race condition. The attack may be performed from remote. T...

CVE-2026-109407 macrozheng mall Coupon Redemption generateOrder race condition

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads to race condition. The attack may be performed from remote. T...

CVE-2026-109406 macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument couponamount/payamount causes business logic errors. The attack is...

CVE-2026-109406 macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument couponamount/payamount causes business logic errors. The attack is...

CVE-2026-109406

A business logic error exists in macrozheng mall (versions up to 1.0.3 ). The vulnerability specifically affects the OmsPortalOrderServiceImpl function within the /order/generateOrder file of the mall-portal component. An attacker can remotely manipulate the coupon_amount or pay_amount arguments ...

CVE-2026-109406

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument couponamount/payamount causes business logic errors. The attack is...

CVE-2026-108784

A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manipulation of the argument totalamount results in business logi...

CVE-2026-108785

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotel...

CVE-2026-108785 macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotel...

EUVD-2026-97139

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotel...

CVE-2026-108785 macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotel...

CVE-2026-108785

A flaw in macrozheng mall versions up to 1.0.3 allows for session expiration due to a vulnerability in the JwtAuthenticationTokenFilter component. Specifically, the JwtTokenUtil.refreshHeadToken function (located in the /admin/refreshToken file) fails to properly handle the token argument. This i...

CVE-2026-108784 macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error

A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manipulation of the argument totalamount results in business logi...

EUVD-2026-97138

A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manipulation of the argument totalamount results in business logi...

CVE-2026-108784

A business logic error exists in macrozheng mall (up to version 1.0.3) within the Payment Endpoint component. Specifically, the AlipayServiceImpl.pay function in com/macro/mall/portal/service/impl/AlipayServiceImpl.java is vulnerable to the manipulation of the total_amount argument. This flaw can...

EUVD-2026-68138

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...