Some potentially useful links:

Slides from talk: as HTML or .odp

Articles - Some of these are getting a bit dated.

• Cross-site scripting
• Cross-site request forgery
• SQL injection
• Authentication bypass
• Remote file include
• HTTP response splitting