Sending multiple concurrent requests to overload the server.

Modifying an input field to bypass client-side restrictions.

Exploiting a SQL query to retrieve unauthorized data.

Skipping the payment page in an e-commerce workflow and directly finalizing the order.