Owasp Top 10

1 Testing for Path Traversal (OWASP-AZ-001) 4. Injection flaws occur when untrusted data is sent to an interpreter as part of a command or query.