OS Command Injection
CSRF (Cross-Site Request Forgery)
Path Traversal
SQL Injection