IDOR vulnerability (Price manipulation)

How it was found

Target: acronis.cz

Step to Reproduce

1.Go to acronis.cz 2.buy any product in this case i am going to buy this https://www.acronis.cz/produkt/acronis-cyber-protect-home-office/ for test 3.fill up details 4.go to burpsuite turn on intercept 5.click on buy now 6.check request in intercept change price of product and click on forward

Check out price_manipulation_POC.mkv for Practical Demonstration

Impact

attacker can reduce the price of the Product.