which category of vulnerability is present when a web application provides access to information based solely on user-provided input, as demonstrated in the following sample url? https://127.0.0.1/salesrecords?salesreceipt