Assume that Bank Muscats web application is using the hidden form fields as a method for transmitting data via its customers. Which of the following can be considered as a potential consequence after an attacker was able to intercept a POST request?

a.

Change the password of the user

b.

Trick the client to do an unintentional act

c.

Post bogus data to the user

d.

Inject false data to the server