While using your bank's online servicing you notice the following string in the URL bar: account?id=368940911028389&Damount=10980&Camount=21" You observe that if you modify the Damount&Camount values

Cookie Tampering involves modifying cookie values stored on the client, not altering URL query string parameters in an HTTP request.

SQL Injection involves inserting malicious SQL syntax into input fields or parameters to manipulate database queries, which is not what is described here.

Web Parameter Tampering occurs when an application passes sensitive data such as prices, account IDs, or transaction amounts as client-side URL parameters without server-side validation or integrity protection. In this case, the Damount and Camount values are fully visible and modifiable in the URL, and the server reflects the tampered values back to the page, confirming the server trusts client-supplied input. An attacker can exploit this to manipulate financial data, bypass business logic, or alter transaction records.

XSS Reflection involves injecting and executing malicious scripts in a web page through user-supplied input, not modifying numeric transaction parameters in a URL.