Improvements to SQL injection (arithmetic also).
Added fuzzCounter to command injection timing module.