An attacker disables payment entirely on an e-commerce site — no database breach, no privilege escalation. Just an exploited business-logic assumption.
النسخة العربية