injection  point
SQL injection Attacks - union - blind - xpath - doube query - outfile
Cross-Site Scripting -  Reflected - Store - dom - session hijacking- click jacking - pastjacking
Cross-Site Request Forgery - CSRF -
Remote Command Execution
PHP Code Injection - Server Side Template Injection - Server Side Injection - PHP Object Injection
Remote File Inclusion - Local File Inclusion
File & Directory Traversal - Local File Download
Unrestricted File Upload
XXE - XML XPath Injection - Session fixation - NoSQL Injection - SSRF