Payment bypass vulnerability in Sina WeChat account

When submitting an order, you can use Fiddler to intercept data during the process of applying for a micro-number, you will find that there is a Webforms Body with the amount paid this time, change this amount to 1 (I changed it to 1), and then continue running, the payment directly bypasses, the application is successful.
Proof of vulnerability:
I thought it was not successful, so I found a seemingly pleasing number to do the experiment ....
You can decide whether to revoke this number or not. I don't want to take any responsibility ..
Wei: 444880
 
Solution:
Programmers understand ..
 
From imlonghao