| शीर्षक | Omega Solution LLC Restro POS Latest version as of July 2026 Business Logic Price Manipulation |
|---|
| विवरण | A business logic vulnerability in Omega Solution Restro POS allows an authenticated user with permission to create sales invoices to manipulate product prices. The /sale-invoice/ endpoint trusts the client-supplied productUnitSalePrice value without verifying it against the product's configured server-side price. An attacker can modify this parameter before submitting the request, causing the application to generate an invoice using an arbitrary price. This may allow unauthorized price reductions, fraudulent invoices, accounting manipulation, and financial loss. |
|---|
| स्रोत | ⚠️ https://github.com/4m3rr0r/PoCVulDb/issues/29 |
|---|
| उपयोगकर्ता | 4m3rr0r (UID 85795) |
|---|
| सबमिशन | 04/10/2026 06:12 PM (23 दिन पहले) |
|---|
| संयम | 26/10/2026 11:09 AM (22 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 426359 [Omega Solution Restro POS तक 20261026 /sale-invoice/ productUnitSalePrice] |
|---|
| अंक | 20 |
|---|