Parameter tampering is a form of Web-based attack in which certain parameters in the Uniform Resource Locator (URL) or Web page form field data entered by a user are changed without that user’s authorization.

What is meant by URL manipulation?

URL manipulation, also called URL rewriting, is the process of altering (often automatically by means of a program written for that purpose) the parameters in a URL (Uniform Resource Locator). URL manipulation can be employed as a convenience by a Web server administrator, or for nefarious purposes by a hacker.

What is HTML tampering?

Tampering with the Form: The HTML form contains the ‘hidden’ fields and can be edited using a text editor. Change the ‘userID’ field and then save the edited file. Then open the same file in your web browser and submit the form. It will accept the edited file because the web application trusts the ‘hidden’ fields.