| Titel | project_team Tmall_demo 2025/05/05 latest Payment loopholes |
|---|
| Beschreibung | The latest version of the Tmall_demo shopping cart has a logical error in the purchase function, which causes users to bypass the harm of zero-dollar purchase, which is serious and fatal for a mall system
Vulnerability Hazards:
Economic loss: Merchant revenue decreases, operating costs increase, 和 platform profitability suffers.
Reputational damage: Customer trust is reduced and brand value is reduced.
Market sabotage: Disrupt market competition and affect normal users |
|---|
| Quelle | ⚠️ https://github.com/bdkuzma/vuln/issues/15 |
|---|
| Benutzer | baihekuz (UID 84516) |
|---|
| Einreichung | 06.05.2025 09:37 (vor 12 Monaten) |
|---|
| Moderieren | 23.05.2025 20:42 (17 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 310215 [Tmall Demo bis 20250505 Payment Identifier /tmall/order/pay/ schwache Verschlüsselung] |
|---|
| Punkte | 20 |
|---|