And Visual Basic itself had them 23 years ago as well. Though, the inflection point, at least in my circles, was in 1998, when rain.forest.puppy talked about "

And Visual Basic itself had them 23 years ago as well. Though, the inflection point, at least in my circles, was in 1998, when rain.forest.puppy talked about "piggy backing" SQL commands. Even there they mentioned using parameters with stored procedures to protect yourself. It's just clear no one in IIS land did at the time, so there was a wide open exploit playground for everyone that saw that release of Phrack, once they got done playing with directory traversal exploits.