APPLICATION PENETRATION TEST SUPER VEDA

Application Penetration Test for Super Veda- Sample Report -An attacker can directly call the updatebasket.asp page with differentquantities. The major danger of this is the ability of the attacker toinject negative quantities to the updatebasket.asp page, which willresult in a negative price for the products! Since the total amount ofproducts is summed later on, the attacker can manipulate the total ofall his purchase to be very low or zero, instead of negative, and thusavoid being noticed by any later inspection of the price order.ImpervaPage26 of73