CVE-2026-110607

BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request...

CVE-2026-110607

The BizSpring Shop (specifically through commit cf22d39daaf1 ) contains a payment verification bypass vulnerability. The flaw resides in the PaymentController.testPostPay handler, allowing authenticated buyers to mark orders as paid without actual payment. An attacker can generate a payment log v...

CVE-2026-110607 BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint

BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request...

CVE-2026-110607: Insufficient Verification of Data Authenticity

BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request...

PT-2026-114049

BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request /member/payment/test...