Read the OWASP Top 10 list. The interesting parts to focus on are the risks described in this document. The risks are described in individual pages, one for each of the 10 risks identified by OWASP. For your convenience, here are the relevant links: