Over 15 years after it was first publicly disclosed, SQL injection is still the number one threat to websites.

Source: The History of SQL Injection, the Hack That Will Never Go Away | Motherboard