Common types of attacks on web upload forms include SQL injection, cross-site scripting (XSS) attacks, and file extension manipulation. These attacks can lead to unauthorized access to sensitive information, malware injections, and service disruptions.