OS command injection
SQL injection
File Path traversal
XML external entity injection
LDAP injection
XPath injection
XML injection
File path manipulation
PHP code injection
Server-side Javascript code injection
Perl code injection
Ruby code injection
Python code injection
Server-side template injection
SSI injection
Cross-site scripting (stored)
HTTP response header injection
Cross site scripting (reflected)
Cross site scripting (DOM-based)
Javascript injection (DOM-based)
WebSocket hijacking
Here’s the link : Google
They are so many ! :D