What HTML form attack vectors exist?

Question

I'm starting to look at the security of HTML forms. So far, my research has identified three main areas of attack:

• Cross Site Request Forgery (CSRF)
• Cross Site Scripting (XSS)
• SQL injection

My question is: Are there more attack vectors for HTML forms than these ? I'm interested in a list of possible attacks through HTML forms.

Answer 1

URI , . " " , SQL-, XSS .. , , JavaScript , .

, , :

• =
• HTTPS
• (, N , - )
• , PHP, GET POST , $_POST, $_GET

- , :

• , A, B, , . ( , .)
• . , . , ops, " " , , , DoS.

Answer 2

, .

( SQL-).

Answer 3

10. A1-Injection. , CSRF/XSS/Injection , GET HTTP.

<form>, , URL- HTTPS, . "" .

Answer 4

. , - :

<img src="http://mysite.com/delete_post/4" style="display:none">

, . , , . .

, - (, ), . , . , , .