A security flaw in the itransact.com credit card payment system allows users to change the price of merchandise ordered.