LDAP injection
Like SQL injection — but against LDAP directories. Manipulate search filters via unsanitised input.
(uid=*&password=*) as a username can bypass login. Defences: validate and escape special characters in LDAP strings (* ( ) \ NUL). Also "blind LDAP injection" via timing differences.