A04-02 Negative quantity
qty=-99
A04-03 Price taken from the client
edit price in the form
A03-18 Code injection via coupon
coupon: 0.5;file_put_contents("pwned.txt","x")
A01-09 CSRF: no token on POST
pocs/csrf-poc.html

Cart

Your cart is empty. Browse products.