high

OS Command INjection
SQL injection
ASP.NET Tracing enabled
file path traversal
XML External entity injection
ldap injection
xpath injection
http put method is enabled
out-of-band resource load (HTTP)
file path manipulation
PHP Code injection
Server-side javascript code injection
perl code injection
ruby code injection
python code injection
expression language injection
unidentified code injection
server-side template injection
ssl injection
cross site scripting (Stored)
HTTP response header injection
xss (reflected)
client-side template injection
xss dom,reflected dom,stored dom
javascript dom,reflected dom,stored dom
client-side sqlm injection dom,reflected dom,stored dom
websocket hijacking dom,reflected dom,stored dom
local file manipulation dom,reflected dom,stored dom
flash cross-domain policy
silverlight cross-domain policy
serialized object in http message