Content is hidden
Cross-site scripting XSS
Blind SQL injection
Improper Access Control
Cross-site Scripting (XSS) - DOM