I think most security issues are just due to people not parsing input at all/properly. Then security consultants give each one a new name as if it was something new. :-)