EUVD-2026-75218

Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering siam-server 1.0.0 allows remote unauthenticated attackers to log in as any user, merchant, or administrator...

CVE-2026-71808

Siam Ordering (siam-server) 1.0.0 is affected by a SQL injection vulnerability. The root cause is the use of ${} string concatenation in AdminMapper.java and multiple other Mapper files (including MerchantWithdrawRecordMapper.java and MemberWithdrawRecordMapper.java), which allows remote authenti...