Scriptless attacks: stealing the pie without touching the sill
Automatic creation of SQL Injection and cross-site scripting attacks