PT-2026-1829

Name of the Vulnerable Software and Affected Versions edu Business Solutions Print Shop Pro WebDesk versions 18.34 Description A SQL injection issue exists due to the improper handling of user-supplied data. Specifically, the hfInventoryDistFormID parameter within the...

CVE-2025-61546

There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 fixed in 19.69 that enables remote attacker to create financial discrepancies by purchasing items with a negative quantity. This vulnerability is possible d...

CVE-2025-61548

A SQL Injection vulnerability exists in edu Business Solutions Print Shop Pro WebDesk version 18.34 . The issue is caused by the application incorporating unsanitized user input from the hfInventoryDistFormID parameter directly into SQL queries without proper escaping or parameterization. This fl...