SQL injection
The first public discussions of SQL injection started appearing around 1998; for example, a 1998 article in Phrack Magazine.