APPLICATION PENETRATION TEST SUPER VEDA

Application Penetration Test for Super Veda- Sample Report -Getting a Lower Price PurchaseThe attacker purchases a set of products in the site and heads to thecheckout page where he sees the list of products he purchased, and thetotal sum for them.Noticing the while hovering over the +/- sign of the quantity the linked URLincludes a parameter called Quantity, that indicates the ability to addanother item of the same kind to the purchase. This parameter isdetermined by the server according to the original number in the page –having the + sign indicate a single increment of the number, and the – signindicate a single decrease of the number.The attacker generates a URL of his own, with the quantity being -1 forexample, which would look like this one:http://veda1.imperva.com/updatebasket.asp?action=change&ProdID=22&Quantity=-1ImpervaPage63 of73