3. CWE-79 : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
4. CWE-434 : Unrestricted Upload of File with Dangerous Type
5. CWE-601 : URL Redirection to Untrusted Site ('Open Redirect')
6. CWE-120 : Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')