Code injection [[SQLi]] [[XML]] inkection - modify xml requests LDAP injection DLL injection - have app run a program for you