External risk intelligence

Print Shop Pro WebDesk Negative Quantity Purchase Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.1)

CVE-2025-61546

The vulnerability exists in a web-based application endpoint (/PSP/appNET/Store/CartV12.aspx/GetUnitPrice) within Print Shop Pro WebDesk. Such web applications are commonly deployed as internet-facing portals for users to browse and purchase items, making the affected endpoint, which handles cart operations, typically accessible over the public internet in standard deployment patterns.

Edubusinesssolutions Print Shop Pro Webdesk

18.34

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

This advisory concerns a critical vulnerability in Print Shop Pro WebDesk, a product from edu Business Solutions. The issue allows unauthenticated remote attackers to manipulate item quantities, potentially leading to financial discrepancies by purchasing items with a negative quantity. The vulnerability stems from insufficient validation of user input.

Allows unauthorized negative purchases.
Could cause financial reporting errors.
Confirm relevance and assess exposure.

Attack Path

How an attacker could exploit the issue

An attacker can exploit this vulnerability by sending a specially crafted request to the GetUnitPrice endpoint. Because the application relies on client-side validation, an attacker could bypass security controls and submit a request that includes a negative quantity for an item. This manipulation could allow an attacker to create false financial discrepancies within the system.

Accessible without authentication.
Manipulates item quantity via web endpoint.
Enables financial discrepancies.

Live Threat

Current exploitation, exposure, and threat context

A vulnerability in the GetUnitPrice endpoint could allow an unauthenticated remote attacker to manipulate item pricing by purchasing items with a negative quantity, potentially leading to financial discrepancies. This is possible because the system relies on client-side validation, which can be bypassed.

Financial transaction integrity.
Remote attackers can exploit pricing.
Potential for financial discrepancies.

Operational Fix

Recommended remediation, mitigation, and detection steps

Application owners and infrastructure teams are likely responsible for addressing this critical vulnerability in Print Shop Pro WebDesk. The first practical step is to identify all instances of the affected application, confirm their internet reachability and business criticality, and then locate the specific owner responsible for remediation planning.

Identify affected application instances.
Verify internet reachability and business criticality.
Plan remediation based on risk.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is edu Business Solutions Print Shop Pro WebDesk?

Print Shop Pro WebDesk is a web-based portal designed for organizations to manage print service requests and commerce. It provides a centralized interface where users browse catalogs, manage shopping carts, and process financial transactions for print jobs.

How does CVE-2025-61546 create financial discrepancies?

This vulnerability is an Improper Input Validation (CWE-20) issue. Because the application relies on client-side controls to check input, an attacker can submit a request with a negative quantity for an item. The server accepts this invalid input, causing the price calculation logic to process the transaction incorrectly, which can lead to unintended financial outcomes.

Do I need to be logged in to trigger this vulnerability?

No. The vulnerability exists on the GetUnitPrice endpoint, which can be reached by an unauthenticated remote attacker. The bug is triggered by submitting a crafted network request directly to this endpoint; it is not dependent on standard user session workflows, nor does it require existing account privileges to execute.

Is my installation at risk according to Halo Surface Signal?

Halo Surface Signal indicates that this vulnerability is highly relevant because the affected endpoint handles cart operations. Since Print Shop Pro WebDesk is often deployed as an internet-facing portal to allow user access, the endpoint is typically reachable from the public internet, increasing the likelihood of unauthorized interaction.

Why should I prioritize investigating my Print Shop Pro deployment?

This vulnerability allows for the manipulation of core transaction data, which poses a significant risk to your financial integrity. Your first steps should be to identify all running instances of the software, determine if they are exposed to the internet, and coordinate with the application owners to manage the update process.

References

github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2025-…

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.