An inactive vendor could be used, by changing the address, then paying unauthorized invoices.

• 篡改停止活动的供应商的地址，然后支付未获批准的款项；