CVE-2026-110607

22th percentile - higher than 22% of all known CVEs

BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request /member/payment/test_post_pay_{paymentLogSn} to obtain goods without paying or settle other members' orders.

An attacker can obtain goods without payment or settle other users' orders, leading to financial losses and compromise of the payment system's integrity.

Upgrade BizSpring Shop beyond commit cf22d39daaf1 if available, or remove/disable the testPostPay handler in production. Implement additional payment verification controls.