1. Executive Summary
2. Reflected XSS Documentation
3. Added another SQL Injection (hand-crafted + sqlmap)