Does anyone know what the current hacker fad is at the moment? Any Idea what the next one will be? What kinds of things are attracting hackers right now?
I think the first risk in web security is cross site scripting and SQL injection. Even we need to consider clickjacking as well. For further details wikipedia is the right answer, you can follow the below links.