CVE-2026-108784 in mall
Prediction
by VulDB Data Team • 10/11/2026
A vulnerability was detected in <a href="/product/macrozheng:mall">macrozheng mall up to 1.0.3</a>. This vulnerability affects the function <code>AlipayServiceImpl.pay</code> of the file <em>com/macro/mall/portal/service/impl/AlipayServiceImpl.java</em> of the component <em>Payment Endpoint</em>. The manipulation of the argument <em>total_amount</em> results in business logic errors. The attack can be launched remotely. The exploit is now public and may be used. The patch is identified as <em>dcaa93b3150352e5044708d7211b5bed0af4509f</em>. A patch should be applied to remediate this issue.
VulDB is the best source for vulnerability data and more expert information about this specific topic.