Myself and Ofer from Breach created a Real World Web Hacking URL's web page that many have found incredibly useful.
"A compiled list of news sources, specific to real-world websites, describing an actual web application security hack. Most media accounts of website hacking incidents contain precious few details about how the compromise was carried out. Only occasionally we'll see descriptions of parameter tampering to uncover someone else's order details or the infamous SQL Injection . These are the links we can directly attribute to web application security failures."