CVE-2026-15502 – AojiaoZero Antaris PayPal IPN Payment ipn.php _rewardPurchase sql injection

CVE ID :CVE-2026-15502

Published : July 12, 2026, 12:45 p.m. | 41 minutes ago

Description :A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulation of the argument item_number results in sql injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…