An Internal Staff Member Logs into an ERP Platform and Clicks

Multiple Choice

An internal staff member logs into an ERP platform and clicks on a record. The browser URL changes to: URL: http://192.168.0.100/ERP/accountId=5&action=SELECT Which of the following is the MOST likely vulnerability in this ERP platform?

A) Brute forcing of account credentials
B) Plain-text credentials transmitted over the Internet
C) Insecure direct object reference
D) SQL injection of ERP back end