Injection

Any flaw where untrusted input is interpreted as code or commands by a downstream system: SQL, OS commands, HTML/JavaScript, LDAP, templates.

Learn it hands-on

• Cross-Site Scripting (XSS) Medium
• SQL Injection Medium