In addition to SQL injection, many "advanced search" engines will compile regular expression patterns from user input. Depending on the language, this can rang

In addition to SQL injection, many "advanced search" engines will compile regular expression patterns from user input. Depending on the language, this can range from a simple Regex DoS to Code Execution (I'm looking at you PHP).