Parameter Tampering

Definitions

1. An attack that changes parameters passed in requests, forms, cookies, or API calls in order to bypass business rules, escalate access, or trigger unintended behavior. Parameter tampering succeeds when the server trusts client-supplied values that should be validated or derived internally.

   In plain English: Manipulating request values to make an application behave in an unsafe or unauthorized way.

   Example: "The checkout bug was classic parameter tampering: changing the hidden price field dropped the order total to one cent."

Related Terms

• WAF
• SSRF
• HTTPS
• Boundary Check
• CAPTCHA
• HTTP Strict Transport Security
• Double Encoding
• Path Traversal