PHPOK企业建站系统(支付漏洞1元任意买);

### 简要描述： PHPOK企业建站系统PHPOK4.4.010(支付漏洞1元任意买)最新版 ### 详细说明： 1.来到产品展示随便选入一件商品进购物车下订单 [<img src="https://images.seebug.org/upload/201511/0919554096547d3a4eb6da54be5276c7ad0c1967.jpg" alt="1.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/0919554096547d3a4eb6da54be5276c7ad0c1967.jpg) 2.来到之类点确认支付抓包修改金额 [<img src="https://images.seebug.org/upload/201511/091956011f348e4b90d55dcb668dc0e8622775a9.png" alt="2.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/091956011f348e4b90d55dcb668dc0e8622775a9.png) 3.改成1元然会出现链接点开就好了 [<img src="https://images.seebug.org/upload/201511/09195626eee32aefb8bece705a2dd1250f268a0b.png" alt="3.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/09195626eee32aefb8bece705a2dd1250f268a0b.png) 只要1元就可以 [<img src="https://images.seebug.org/upload/201511/09195651a3e78dcbc49f741c0a4c2fb5f8717984.png" alt="4.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/09195651a3e78dcbc49f741c0a4c2fb5f8717984.png) [<img src="https://images.seebug.org/upload/201511/0919565843efd034a621885420a08cc4d3d099ac.png" alt="5.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/0919565843efd034a621885420a08cc4d3d099ac.png) ### 漏洞证明： 1.来到产品展示随便选入一件商品进购物车下订单 [<img src="https://images.seebug.org/upload/201511/0919554096547d3a4eb6da54be5276c7ad0c1967.jpg" alt="1.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/0919554096547d3a4eb6da54be5276c7ad0c1967.jpg) 2.来到之类点确认支付抓包修改金额 [<img src="https://images.seebug.org/upload/201511/091956011f348e4b90d55dcb668dc0e8622775a9.png" alt="2.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/091956011f348e4b90d55dcb668dc0e8622775a9.png) 3.改成1元然会出现链接点开就好了 [<img src="https://images.seebug.org/upload/201511/09195626eee32aefb8bece705a2dd1250f268a0b.png" alt="3.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/09195626eee32aefb8bece705a2dd1250f268a0b.png) 只要1元就可以 [<img src="https://images.seebug.org/upload/201511/09195651a3e78dcbc49f741c0a4c2fb5f8717984.png" alt="4.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/09195651a3e78dcbc49f741c0a4c2fb5f8717984.png) [<img src="https://images.seebug.org/upload/201511/0919565843efd034a621885420a08cc4d3d099ac.png" alt="5.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201511/0919565843efd034a621885420a08cc4d3d099ac.png)