A nice complete classification documentation about Web Security Threat from the Web Application Security Consortium.
Grab this badge here!