This is an old revision of the document!
Todo
Exploiting XSS with 20 characters limitation
SQL Injection Cheat Sheet (DB2)
SQL Injection Cheat Sheet (MSSQL)