BizSpring

Products

ProductCVEsExploitedLatest
BizSpring Java Mall2–Oct 14, 2026
BizSpring Shop2–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-110608 Medium 5.4 BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive 0.4%
  • CVE-2026-110608 Medium 5.4 BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive 0.4%
  • CVE-2026-110607 Medium 6.5 BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint 0.3%
  • CVE-2026-110607 Medium 6.5 BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint 0.3%