SQL Injection
SQL? I hardly know... Will... Nevermind, sorry.
Server Side Template Injection
See if you can get the flag from the server through the template!
Cross Site Scripting
Try to run code on someone else's computer.
MongoDB Injection
NoSQL doesn't mean no vulnerabilities (don't fire me Mongo).