| Title | project_team Tmall_demo 2025/05/05 latest Payment loopholes |
|---|
| Description | The latest version of the Tmall_demo shopping cart has a logical error in the purchase function, which causes users to bypass the harm of zero-dollar purchase, which is serious and fatal for a mall system
Vulnerability Hazards：
Economic loss: Merchant revenue decreases, operating costs increase, 和 platform profitability suffers.
Reputational damage: Customer trust is reduced and brand value is reduced.
Market sabotage: Disrupt market competition and affect normal users |
|---|
| Source | ⚠️ https://github.com/bdkuzma/vuln/issues/15 |
|---|
| User | baihekuz (UID 84516) |
|---|
| Submission | 05/06/2025 09:37 (12 months ago) |
|---|
| Moderation | 05/23/2025 20:42 (17 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 310215 [Tmall Demo up to 20250505 Payment Identifier /tmall/order/pay/ random values] |
|---|
| Points | 20 |
|---|