CVE-2025-9836

CVE-2025-9836 affects macrozheng mall up to version 1.0.3. The flaw exists in the paySuccess function (/order/paySuccess); manipulating the orderId parameter enables an authorization bypass. The issue can be exploited remotely and exploitation has been made public (e.g., public PoC). Connected so...

PT-2025-35637

Name of the Vulnerable Software and Affected Versions: macrozheng mall versions up to 1.0.3 Description: A vulnerability exists in the paySuccess function of the /order/paySuccess file. Manipulation of the orderId argument can lead to authorization bypass. The exploit has been made public...