If you want to get more hands-on familiar with these, I used to be an administrator at hackthissite.org. It's a site that has hacking "missions" which let you try to get in the shoes of the cracker. It was very helpful for me in learning about things like SQL injections and XSS.
http://hackthissite.org