specs for CVE-2012-5664 sql_injection vulnarability