Kritik CVSS 9.1 PoC var
CVE-2025-61546: Print Shop Pro Webdesk: hatalı girdi doğrulama
Açıklama (NVD)
There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.69) that enables remote attacker to create financial discrepancies by purchasing items with a negative quantity. This vulnerability is possible due to reliance on client-side input validation controls.
Özet bilgiler
- Ürün
- Edubusinesssolutions Print Shop Pro Webdesk
- CVSS v3.1
- 9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - EPSS
- %0,54 (yüzdelik 46)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| edubusinesssolutions-print-shop-pro-webdesk | 18.34 | 18.34 | — |