1. SQL injection
2. File Vulnerability