Restro Pos
Monthly
Authenticated price manipulation in Omega Solution Restro POS through 20261026 can corrupt sale-invoice business logic via the productUnitSalePrice argument, letting a low-privileged user alter invoice line values. The CVSS 4.0 base score is 2.1 and the independent CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) confirms integrity-only impact with no confidentiality or availability effect; exploitation requires a low-privileged authenticated session on the application. A public PoC reference exists but is not verified as working exploit code, active exploitation is not confirmed in the provided data, and the vuln.today priority is monitor.
Authenticated price manipulation in Omega Solution Restro POS through 20261026 can corrupt sale-invoice business logic via the productUnitSalePrice argument, letting a low-privileged user alter invoice line values. The CVSS 4.0 base score is 2.1 and the independent CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) confirms integrity-only impact with no confidentiality or availability effect; exploitation requires a low-privileged authenticated session on the application. A public PoC reference exists but is not verified as working exploit code, active exploitation is not confirmed in the provided data, and the vuln.today priority is monitor.